Active Directory Engineer

7+ years of experience architecting, administering, and securing Active Directory in large enterprise environments
Deep expertise in Active Directory, Group Policy, DNS, DHCP, and Windows Server platforms
Strong hands-on experience implementing and managing Active Directory security controls and hardening initiatives
Experience deploying and managing Windows Local Administrator Password Solution
Experience implementing and supporting MFA for key systems
Experience deploying and managing Windows security features such as Credential Guard, and other credential theft mitigation technologies
Strong understanding of identity lifecycle management, authentication protocols (Kerberos, NTLM), and access control models
Proven experience designing and implementing AD forests, domains, trusts, replication strategies, and privileged access models
Knowledge of Active Directory tiering, privileged access management, administrative workstation strategies, and least-privilege principles
Experience assessing and remediating Active Directory security vulnerabilities and misconfigurations
Proficiency in scripting and automation using PowerShell
Experience working in regulated environments with an emphasis on compliance, auditing, and security governance
A Degree in Computer Science, Engineering, Mathematics, similar field of study, or equivalent work experience
Familiarity with Active Directory security assessment tools and methodologies, including attack path analysis and privilege escalation remediation
Experience integrating AD with other platforms (e.g. Linux systems, SaaS applications)
Strong understanding of EDR, endpoint security, and security monitoring solutions in Windows environments
Strong documentation and communication skills
A mindset for proactive problem-solving and continuous improvement
Microsoft certifications such as Microsoft Certified: Identity and Access Administrator Associate, Security Operations Analyst Associate, or Azure Solutions Architect

#J-18808-Ljbffr