Infrastructure Engineer-Outside IR35 at Hydrogen Group, Hertfordshire, 6 Months, £Contract Rate

My client, a well known Retail business, is looking for a Senior Infrastructure Engineer with strong experience in identity modernisation, particularly around moving away from Legacy directory services and helping shape a more secure, scalable, cloud first environment.

This is an initial 6 month contract, outside of IR35. It requires 2 days per week in the office.

This role is ideal for someone who has hands-on expertise in Active Directory rationalisation, Legacy LDAP application migration, and the adoption of modern authentication standards such as SAML, OAuth2 and OpenID Connect.

Key Experience Required

• Identity & Directory Modernisation (Core Focus)
• Strong experience with Active Directory deprecation, consolidation, and domain dependency reduction
• Proven track record of assessing and migrating LDAP-based authentication flows to modern identity methods such as SAML, OAuth2 or OpenID Connect
• Solid understanding of Entra Domain Services (EDS) for supporting Legacy workloads without the need for full AD infrastructure
• Experience building identity automation solutions to improve JML processes, reduce technical debt, and remove Legacy directory reliance
• Microsoft Infrastructure
• Strong background across Windows Server, Entra ID, GPO transition work, and identity life cycle automation
• Azure Platform Engineering

Experience deploying and supporting core Azure services, including:

• Azure VMs
• Container Instances
• Function Apps
• Virtual WAN
• Azure Firewall
• Automation Accounts
• Scripting & Automation
• Advanced PowerShell skills with experience automating workflows, reporting, system administration, and identity processes
• Good Python Scripting capability for integrations, data handling, and tooling
• Experience working with REST APIs across cloud and on-prem environments
• DevOps & Infrastructure as Code
• Exposure to Azure DevOps, GitLab, or similar CI/CD tooling
• Working knowledge of Terraform, ideally in live/production environments

Additional/Nice-to-Have Skills

• Google Workspace support or integrations
• VMware vCenter
• Intermediate Linux
• Basic MSSQL
• Citrix, Intune, and thin/edge client technologies (eg Wyse/IGEL)
• Understanding of Zero Trust, Conditional Access, and core networking fundamentals such as DNS, DHCP, PKI, and TCP/IP

The Opportunity

You'll join a strong infrastructure team supporting the move from a hybrid setup to a cloud-first, identity-modernised environment. The role combines proactive engineering, Legacy platform reduction, and some reactive support/on-call responsibilities.

We're looking for someone who is:

• Comfortable working through complex identity transitions
• Calm under pressure
• Strong with stakeholders and able to explain technical concepts clearly