Lucid Support Services Ltd
Job title: Active Directory Architect/SME Duration: 9 months Clearance required: Active SC Clearance required with a willingness to undergo DV Rate: To be discussed Location: Hybrid, onsite in Corsham twice a week Specification: Below Overview: We are seeking a highly skilled Microsoft Active Directory Subject Matter Expert (SME) to lead the design, implementation, and optimisation of enterprise directory services within secure, high-assurance environments. This role requires deep technical expertise in Active Directory architecture, strong delivery experience, and the ability to operate both strategically and hands-on. The successful candidate will support a UK secure account, working closely with stakeholders and delivering solutions on customer sites. Key Responsibilities: Lead the architecture, design, and evolution of Microsoft Active Directory environments (on premises) Act as the technical SME for Active Directory, providing expert guidance on best practices, policies, and standards Design and implement secure AD architectures, including domains, forests, trusts, and replication strategies Develop and enforce Group Policy (GPO) strategies aligned with security and operational requirements Deliver identity services integration, including federation (ADFS) Define and implement tiered administration models, privileged access controls, Integration with Privileged access Management tooling, and secure identity design patterns Conduct health checks, security assessments, and remediation planning for AD environments Support incident resolution and root cause analysis relating to identity and authentication services Produce and maintain comprehensive design and operational documentation Work closely with security, infrastructure, and application teams to ensure secure and efficient identity services Engage directly with Tech Lead, Programme Manager and customers on-site, supporting delivery and building trusted relationships Experience Required: Proven experience in an Active Directory Architect or Senior SME role Deep hands-on expertise with: Microsoft Active Directory (multi-domain/forest environments) Group Policy design and management DNS, DHCP, and core supporting infrastructure Strong experience in designing and implementing enterprise-scale AD environments Demonstrable experience producing high-quality design documentation, including: High-Level Designs (HLDs) Low-Level Designs (LLDs) Security architecture documentation Operational procedures and runbooks Strong understanding of identity security, including: Tiered administration models Least privilege access Privileged Access Workstations (PAWs) Privileged access Management Toolset Knowledge of authentication protocols (Kerberos, NTLM, LDAP, SAML, OAuth) Experience with PowerShell Scripting and automation Familiarity with integrating AD into enterprise security and monitoring tooling (eg, SIEM) Excellent stakeholder engagement, communication, and documentation skills Industry Experience: Experience working within the Defence and/or Aerospace sector is highly desirable Familiarity with policies, standards, and security frameworks (eg, JSP series, NCSC guidance) Familiarity with high-security, regulated environments and secure system delivery Desirable Certifications Microsoft certifications (eg, Identity and Access Administrator, Windows Server) CISSP, CISM, or equivalent security certifications TOGAF or other architecture frameworks (desirable) If you are available and interested in this opportunity, please apply for further information. Please note that due to high volumes of applications we are unable to contact every applicant. If you do not hear back from us within 7 days of sending your application, please assume that you have not been successful on this occasion. At Lucid, we celebrate difference and value diverse perspectives, underpinned by our values 'Honesty, Integrity and Pragmatism'. We are proud to provide equal opportunities in line with our Diversity and Inclusion policy and welcome applications from all suitably qualified or experienced people, regardless of personal characteristics. If you have a disability or health condition and seek support throughout the recruitment process, please do not hesitate to contact us via the details below.
Job title: Active Directory Architect/SME Duration: 9 months Clearance required: Active SC Clearance required with a willingness to undergo DV Rate: To be discussed Location: Hybrid, onsite in Corsham twice a week Specification: Below Overview: We are seeking a highly skilled Microsoft Active Directory Subject Matter Expert (SME) to lead the design, implementation, and optimisation of enterprise directory services within secure, high-assurance environments. This role requires deep technical expertise in Active Directory architecture, strong delivery experience, and the ability to operate both strategically and hands-on. The successful candidate will support a UK secure account, working closely with stakeholders and delivering solutions on customer sites. Key Responsibilities: Lead the architecture, design, and evolution of Microsoft Active Directory environments (on premises) Act as the technical SME for Active Directory, providing expert guidance on best practices, policies, and standards Design and implement secure AD architectures, including domains, forests, trusts, and replication strategies Develop and enforce Group Policy (GPO) strategies aligned with security and operational requirements Deliver identity services integration, including federation (ADFS) Define and implement tiered administration models, privileged access controls, Integration with Privileged access Management tooling, and secure identity design patterns Conduct health checks, security assessments, and remediation planning for AD environments Support incident resolution and root cause analysis relating to identity and authentication services Produce and maintain comprehensive design and operational documentation Work closely with security, infrastructure, and application teams to ensure secure and efficient identity services Engage directly with Tech Lead, Programme Manager and customers on-site, supporting delivery and building trusted relationships Experience Required: Proven experience in an Active Directory Architect or Senior SME role Deep hands-on expertise with: Microsoft Active Directory (multi-domain/forest environments) Group Policy design and management DNS, DHCP, and core supporting infrastructure Strong experience in designing and implementing enterprise-scale AD environments Demonstrable experience producing high-quality design documentation, including: High-Level Designs (HLDs) Low-Level Designs (LLDs) Security architecture documentation Operational procedures and runbooks Strong understanding of identity security, including: Tiered administration models Least privilege access Privileged Access Workstations (PAWs) Privileged access Management Toolset Knowledge of authentication protocols (Kerberos, NTLM, LDAP, SAML, OAuth) Experience with PowerShell Scripting and automation Familiarity with integrating AD into enterprise security and monitoring tooling (eg, SIEM) Excellent stakeholder engagement, communication, and documentation skills Industry Experience: Experience working within the Defence and/or Aerospace sector is highly desirable Familiarity with policies, standards, and security frameworks (eg, JSP series, NCSC guidance) Familiarity with high-security, regulated environments and secure system delivery Desirable Certifications Microsoft certifications (eg, Identity and Access Administrator, Windows Server) CISSP, CISM, or equivalent security certifications TOGAF or other architecture frameworks (desirable) If you are available and interested in this opportunity, please apply for further information. Please note that due to high volumes of applications we are unable to contact every applicant. If you do not hear back from us within 7 days of sending your application, please assume that you have not been successful on this occasion. At Lucid, we celebrate difference and value diverse perspectives, underpinned by our values 'Honesty, Integrity and Pragmatism'. We are proud to provide equal opportunities in line with our Diversity and Inclusion policy and welcome applications from all suitably qualified or experienced people, regardless of personal characteristics. If you have a disability or health condition and seek support throughout the recruitment process, please do not hesitate to contact us via the details below.
Lucid Support Services Ltd
Job title: Privileged Access Management (PAM) Architect/SME - CyberArk Location: UK-Based - Travel to secure customer sites required Contract Duration: Until end of March 2027 - Likely extension Rate: Competitive/Negotiable depending on experience Clearance Required: Active SC required with a willingness to under-go DV IR35 Status: Inside IR35 Role Overview: We are seeking an experienced Privileged Access Management (PAM) Architect/Subject Matter Expert (SME) to support a major programme within a highly secure UK Defence environment. The successful candidate will be responsible for the architecture, design, implementation and optimisation of enterprise-scale Privileged Access Management solutions, with a particular focus on CyberArk. This role requires a combination of strategic architectural expertise, hands-on technical delivery and strong stakeholder engagement, working across complex, high-assurance environments. Key Responsibilities: Lead the architecture, design and implementation of CyberArk PAM solutions across complex, on-premise enterprise environments. Act as the technical Subject Matter Expert for Privileged Access Management, providing guidance on security best practices, standards and emerging technologies. Design, deploy and optimise CyberArk solutions, including Privileged Access Security (PAS), Privilege Cloud and associated components. Define and implement privileged access policies, credential lifecycle management, session monitoring and secure vaulting strategies. Produce comprehensive technical documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), security architecture documentation and operational runbooks. Collaborate with security, infrastructure and application teams to integrate PAM controls into existing enterprise environments. Conduct security assessments, gap analyses and remediation activities aligned with recognised standards, including NIST and ISO 27001. Support security audits, regulatory compliance and governance requirements. Provide technical leadership, mentoring and guidance to internal engineering and security teams. Engage directly with stakeholders and attend secure customer sites as required to support successful delivery. Identify opportunities for continuous improvement, automation and enhanced security capabilities. Essential Skills & Experience: Proven experience working as a PAM Architect, CyberArk Architect or Senior PAM SME. Extensive hands-on experience designing, implementing and supporting enterprise CyberArk solutions. Strong technical knowledge of CyberArk components, including: Privileged Access Security (PAS) Central Policy Manager (CPM) Privileged Session Manager (PSM) Password Vault Web Access (PVWA) Privileged Threat Analytics (PTA) Demonstrable experience delivering enterprise-scale PAM architecture and implementations. Strong experience producing HLDs, LLDs, security architecture documents and implementation runbooks. In-depth understanding of Identity and Access Management (IAM), privileged credential lifecycle management and least privilege security principles. Experience implementing privileged session isolation, monitoring, recording and secure credential vaulting. Experience integrating CyberArk with Active Directory, LDAP, SIEM and ITSM platforms. Strong understanding of enterprise security frameworks, standards and compliance requirements. Excellent stakeholder engagement, communication and technical leadership skills. Ability to operate independently across both architectural design and hands-on implementation. Desirable Skills & Experience: Previous experience delivering PAM solutions within UK Defence, Aerospace or other highly regulated environments. Experience with CyberArk Privilege Cloud and cloud-based PAM capabilities. Familiarity with DevSecOps, automation and secrets management. Experience working within complex, high-assurance security environments. Knowledge of NIST, ISO 27001 and relevant security architecture frameworks. Desirable Certifications: CyberArk Certified Delivery Engineer (CDE) CyberArk Defender/Sentry CISSP or CISM TOGAF or equivalent architecture certification If you are available and interested in this opportunity, please apply for further information. Please note that due to high volumes of applications we are unable to contact every applicant. If you do not hear back from us within 7 days of sending your application, please assume that you have not been successful on this occasion. At Lucid, we celebrate difference and value diverse perspectives, underpinned by our values 'Honesty, Integrity and Pragmatism'. We are proud to provide equal opportunities in line with our Diversity and Inclusion policy and welcome applications from all suitably qualified or experienced people, regardless of personal characteristics. If you have a disability or health condition and seek support throughout the recruitment process, please do not hesitate to contact us via the details below.
Job title: Privileged Access Management (PAM) Architect/SME - CyberArk Location: UK-Based - Travel to secure customer sites required Contract Duration: Until end of March 2027 - Likely extension Rate: Competitive/Negotiable depending on experience Clearance Required: Active SC required with a willingness to under-go DV IR35 Status: Inside IR35 Role Overview: We are seeking an experienced Privileged Access Management (PAM) Architect/Subject Matter Expert (SME) to support a major programme within a highly secure UK Defence environment. The successful candidate will be responsible for the architecture, design, implementation and optimisation of enterprise-scale Privileged Access Management solutions, with a particular focus on CyberArk. This role requires a combination of strategic architectural expertise, hands-on technical delivery and strong stakeholder engagement, working across complex, high-assurance environments. Key Responsibilities: Lead the architecture, design and implementation of CyberArk PAM solutions across complex, on-premise enterprise environments. Act as the technical Subject Matter Expert for Privileged Access Management, providing guidance on security best practices, standards and emerging technologies. Design, deploy and optimise CyberArk solutions, including Privileged Access Security (PAS), Privilege Cloud and associated components. Define and implement privileged access policies, credential lifecycle management, session monitoring and secure vaulting strategies. Produce comprehensive technical documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), security architecture documentation and operational runbooks. Collaborate with security, infrastructure and application teams to integrate PAM controls into existing enterprise environments. Conduct security assessments, gap analyses and remediation activities aligned with recognised standards, including NIST and ISO 27001. Support security audits, regulatory compliance and governance requirements. Provide technical leadership, mentoring and guidance to internal engineering and security teams. Engage directly with stakeholders and attend secure customer sites as required to support successful delivery. Identify opportunities for continuous improvement, automation and enhanced security capabilities. Essential Skills & Experience: Proven experience working as a PAM Architect, CyberArk Architect or Senior PAM SME. Extensive hands-on experience designing, implementing and supporting enterprise CyberArk solutions. Strong technical knowledge of CyberArk components, including: Privileged Access Security (PAS) Central Policy Manager (CPM) Privileged Session Manager (PSM) Password Vault Web Access (PVWA) Privileged Threat Analytics (PTA) Demonstrable experience delivering enterprise-scale PAM architecture and implementations. Strong experience producing HLDs, LLDs, security architecture documents and implementation runbooks. In-depth understanding of Identity and Access Management (IAM), privileged credential lifecycle management and least privilege security principles. Experience implementing privileged session isolation, monitoring, recording and secure credential vaulting. Experience integrating CyberArk with Active Directory, LDAP, SIEM and ITSM platforms. Strong understanding of enterprise security frameworks, standards and compliance requirements. Excellent stakeholder engagement, communication and technical leadership skills. Ability to operate independently across both architectural design and hands-on implementation. Desirable Skills & Experience: Previous experience delivering PAM solutions within UK Defence, Aerospace or other highly regulated environments. Experience with CyberArk Privilege Cloud and cloud-based PAM capabilities. Familiarity with DevSecOps, automation and secrets management. Experience working within complex, high-assurance security environments. Knowledge of NIST, ISO 27001 and relevant security architecture frameworks. Desirable Certifications: CyberArk Certified Delivery Engineer (CDE) CyberArk Defender/Sentry CISSP or CISM TOGAF or equivalent architecture certification If you are available and interested in this opportunity, please apply for further information. Please note that due to high volumes of applications we are unable to contact every applicant. If you do not hear back from us within 7 days of sending your application, please assume that you have not been successful on this occasion. At Lucid, we celebrate difference and value diverse perspectives, underpinned by our values 'Honesty, Integrity and Pragmatism'. We are proud to provide equal opportunities in line with our Diversity and Inclusion policy and welcome applications from all suitably qualified or experienced people, regardless of personal characteristics. If you have a disability or health condition and seek support throughout the recruitment process, please do not hesitate to contact us via the details below.
