About Us:

Capita is the UK's leading provider of business process management and integrated professional
support service solutions. With 64,000 staff and a turnover of 3.9bn, we manage the services
for many Government departments and large Public/Private Sector organisations including
finance & pensions, IT Services, Software products (such as Capita SIMS, Integra etc), training,
call centers, recruitment, and change management to name a few.

Capita IT Enterprise Services is a customer-focused, trusted IT services business providing

individual IT services, managed and outsourced IT solutions and is also an award winning value
added reseller for public and private sector organisations in local and central government,
education, healthcare, financial services, insurance, manufacturing, transport, life & pensions
and corporate sectors.

The service portfolio comprises five key areas - Cloud, Applications, End User Services,
Networks, Communications, Contact Centres and Technology Solutions. IT Enterprise Services
has over nearly 3,000 clients and 4,500 people across more than 50 sites in UK, Ireland and
India. Capita Managed IT Solutions, Updata Infrastructure, Network Technology Solutions (NTS)
and Solid State Solutions (S3) are part of IT Enterprise Services.

The Role:
We are looking for a strong MS Support Analyst to assist with the Active Directory during and
after, our transition from VMWare platform solutions to the Cloud. This role would be suit
someone who has been working in a second line role with strong Active Directory experience
dealing with domains, forests, tree structures and all things Microsoft including the maintenance
of everything that goes on behind the scenes such as access's and logins.

Responsibilities

Maintains security and integrity of schema

Oversees modifications to schema
Full disaster recovery plan and practice of schema Enterprise Administrator
Creation and management of the forest
Overall security and reliability of the forest
Creation and removal of domains
Management of trust relationship in the domain
Full disaster recovery plan and practice of Domain Administrator
Creation and management of directory infrastructure
o
Includes FSMO roles, trusts, Kerberos KDCs, replication topology, etc.
o
Creation of all top-level OU hierarchies with sub OUs, groups, and
appropriate security permissions. This includes adding the OU Admins to the

AddComputers group, Group Policy Creator Owners group, and OU Admins mail
list. It also includes setting appropriate permissions on the created objects
Monitor and reporting associated with the reliability and security of the domain
o
Use the domain admin account only for actions that require the privilege
level of this account
o
Monitoring changes to domain root and domain controllers OU to ensure
unauthorized changes do not occur
o
Day-to-day management of domain controllers
o
Monitoring connectivity, synchronization, replication, netlogon, time services,
FSMO roles, schema, NTDS database partitions, DNS settings, SRV records,
and trust relationships
o
Review DC event and security logs and take corrective actions
o
Monitor and resolve security situations at all levels of domain to ensure
stable and secure domain
Domain Controller Management
o
Physical security of the domain controllers in IT Division space and over site
for all domain controllers
o
Backups and restores on domain controllers
o
Full disaster recovery plan and practice of DCs and core Directory objects
Policy monitoring and compliance
o
Apply and enforce CAPITA standard naming conventions for objects in the
domain
o
Comply with CAPITA AD Change and Configuration Management (CCM)
requirements
o
Comply with CAPITA AD policies and standards
o
Monitor compliance with CAPITA AD policies and standards, including
change management
o
Verify CAPITA AD Change and Configuration Management (CCM)
requirements are implemented by OU Administrators
Communication and coordination
o
Coordination with IT sec to ensure the CAPITA domain is secure
Secure remote administration of the DCs and member servers managed by the
Infrastructure Group
Manage group policy at root of domain and for Domain Controllers OU
Creation, testing, and management of GPOs intended to be used by multiple OU
Admins
Manage the Users and Computers Containers
Install and manage security reporting tools used to monitor changes to the Active
Directory
Delegate monitored data and elevated privileges to others as needed
Create and maintain the test domain as a reasonable approximation of the production
domain
Plan and manage all migrations and upgrades related to the AD or the DCs
Verify new software deployments and GPO policies work by testing them in the test
domain as appropriate

Essential Skills

Active directory experience

Forests, Trees and Domains
Microsoft Directories