Active Directory Engineer

Active Directory Engineer With Powershell

Hybrid 3 Days in 2 Days Remote (Chandler, AZ)
12-18 Month Contract
Job Description: Analyze CVEs, MSRC advisories, and vendor security guidance to determine required remediation actions
Translate vulnerability intelligence into clear technical actions (patching, GPO updates, registry changes, service/protocol hardening)
Define scope and applicability, including distinctions across:
Domain Controllers vs. Member Servers
Tiered environments
Legacy or exception-based systems
Assess dependencies, constraints, and potential blast radius prior to deployment
Evaluate exploitability vs. environmental exposure to inform prioritization
Drive prioritization and sequencing of remediation activities across platforms
Design and develop automation solutions (primarily PowerShell) to deploy and validate fixes
Build repeatable validation mechanisms to ensure remediation effectiveness
Partner with Operations teams to ensure timely, coordinated rollout of remediations
Produce clear change documentation, including intent, impact, rollback considerations, and risk analysis
Deep understanding of Windows Server and Active Directory security architecture
Proven experience interpreting:
CVE writeups
MSRC security advisories
Vendor mitigation guidance
Expert-level proficiency in PowerShell scripting and automation development
Strong ability to evaluate exploitability vs. real-world exposure
Familiarity with Active Directory attack paths and adversary techniques
Experience with Hyper-V and SCVMM
Experience with SCCM
Experience performing risk analysis in large, regulated enterprise environments
Strong written communication skills, including the ability to produce:
Change intent documents
Impact and risk assessments
Demonstrated experience creating technical and process documentation
Strong understanding of Active Directory internetworking, including:
Name resolution (DNS)
Kerberos and NTLM authentication flows
Hands-on experience with:
Kerberos, LDAP, DNS, NTLM
System and performance monitoring
Experience in Python
Experience securing and reducing Active Directory attack surface, particularly Domain Controllers
Experience with Windows Server 2016, 2019, and 2022
Familiarity with Hyper-V and virtualization platforms
Experience developing AD policies, standards, and operational procedures
Strong analytical, design, and problem-solving capabilities
Ability to translate complex technical concepts into clear, actionable processes
Experience operating in fast-paced environments with shifting priorities
Job Type & Location: This is a Contract position based out of Chandler, AZ.
Pay and Benefits: The pay range for this position is $60.00 – $89.00/hr. Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: – Medical, dental & vision – Critical Illness, Accident, and Hospital – 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available – Life Insurance (Voluntary Life & AD&D for the employee and dependents) – Short and long-term disability – Health Spending Account (HSA) – Transportation benefits – Employee Assistance Program – Time Off/Leave (PTO, Vacation or Sick Leave)
Workplace Type: This is a hybrid position in Chandler,AZ.
Application Deadline: This position is anticipated to close on Jun 11, 2026.
About TEKsystems: We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.
The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.