Darren Reevell

End-to-end ownership of global identity and endpoint management platforms serving a multinational workforce across 170+ countries. Strategic and operational lead for Active Directory, Entra ID, ADFS, WSUS, SCCM/MEM, Intune, and Azure Arc, with accountability for platform resilience, security compliance, and service continuity. Lead and develop a team of nine engineers across Identity and Endpoint towers, covering AD/Entra ID and SCCM/Intune disciplines, supported by a Platform Supervisor. Define architecture, strategy, and operating models for all identity and endpoint platforms; drive modernisation aligned to business and security priorities. Close partner to the cybersecurity function on risk reduction, identity security controls, Conditional Access, MFA (Duo), and regulatory compliance (ISO 27001, SOC 2). Delivered measurable improvements to patch compliance, incident recovery times, and audit outcomes through disciplined operating models and automation. Built internal tooling including automated health dashboards, PowerShell-based collection and reporting scripts, and a browser-based M365/Entra backup and recovery tool (TenantVault).

SME engagement supporting a large-scale IAM transformation programme for Willis Towers Watson, providing specialist Active Directory consultancy and technical assurance.

Contracted to support PwC's global Active Directory upgrade, planning and executing migrations of resources from multiple EMEA-region forests into a purpose-built Windows Server 2016 Active Directory environment.

Lead consultant for a secure Active Directory design and greenfield implementation using Windows Server 2019. Delivered BitLocker endpoint encryption, Veeam, WSUS, WatchGuard MFA, Certificate Services, and DFS Namespace/Replication alongside technical and managerial workshops.

Upgraded Quest Active Roles Server and developed import scripts for Quest One Identity Manager within a financial services environment.

Embedded within the InfoSec / Security Engineering function to deliver Active Directory security hardening and SOX compliance initiatives, working across a high-availability betting and gaming environment.

Third-line consultancy and technical leadership across Wintel, Active Directory, and messaging platforms for a critical national infrastructure organisation. Key deliveries included: Windows Server 2008 R2 Active Directory upgrade (technical lead on critical domain). Active Directory transformation: new OU hierarchy design and roles-based access control using Quest ActiveRoles Server. Server hardening Group Policy remediation; Exchange 2016 upgrade; DSRM password automation. Bespoke PowerShell tooling: sensitive group alerting, account/password auditing, and automated AD health reporting.

Senior specialist providing third-line support and project consultancy across multiple Windows Server 2008 R2 global AD forests, ADAM/LDAP, Exchange 2010, and McAfee ePO. Delivered AD CS migration to 2012 R2, DFS migration, AGPM implementation, Quest OneIM enhancements, and automated PowerShell AD health check tooling.

Project manager and architect on the consolidation of seven disparate Windows Active Directory forests into a single 52,000+ user environment at one of the UK's leading research universities.

Designed and built three separate multi-domain Active Directory forests for a leading UK internet business, ensuring compliance with rigorous PCI-DSS requirements.

Over six years as technical lead for all directory services (Active Directory, Novell NDS, LDAP) within one of the UK's largest insurance groups, including transition to the Hewlett-Packard managed service.

ISC2 System Security Engineering Foundations Certificate (2 of 3)

ISC2

CompTIA Security+

CompTIA