Description

You will join a team responsible for building and maintaining critical backend Microsoft infrastructure, contributing to the modernization of a global Active Directory infrastructure that serves thousands of engineers and systems worldwide.

Responsibilities

• Architect, administer, and secure Active Directory infrastructure in large enterprise environments
• Design and implement Active Directory forests, domains, trusts, replication strategies, and privileged access models
• Manage and implement Active Directory security controls and hardening initiatives
• Deploy and manage Windows Local Administrator Password Solutions and credential management tools
• Handle Privileged Access Management (PAM) responsibilities and Identity and Access Management (IAM) initiatives
• Implement and support multi-factor authentication for key systems
• Deploy and manage Windows security features such as Credential Guard and other credential theft mitigation technologies
• Assess, remediate, and respond to Active Directory security vulnerabilities, misconfigurations, and security findings
• Manage endpoint detection and response (EDR) solutions and credentialing tools
• Ensure compliance with security governance, auditing, and regulatory requirements
• Work with the team on identity lifecycle management and access control implementation

Qualifications

• Required
  • 7+ years of experience architecting, administering, and securing Active Directory in large enterprise environments
  • Deep expertise in Active Directory, Group Policy, DNS, DHCP, and Windows Server platforms
  • Strong hands-on experience implementing and managing Active Directory security controls and hardening initiatives
  • Experience deploying and managing Windows Local Administrator Password Solutions
  • Experience implementing and supporting multi-factor authentication for key systems
  • Experience deploying and managing Windows security features such as Credential Guard and other credential theft mitigation technologies
  • Strong understanding of identity lifecycle management, authentication protocols (Kerberos, NTLM), and access control models
  • Proven experience designing and implementing AD forests, domains, trusts, replication strategies, and privileged access models
  • Knowledge of Active Directory tiering, privileged access management, administrative workstation strategies, and least-privilege principles
  • Experience assessing and remediating Active Directory security vulnerabilities and misconfigurations
  • Proficiency in scripting and automation using PowerShell
  • Experience working in regulated environments with an emphasis on compliance, auditing, and security governance
  • Bachelor's degree in Computer Science, Engineering, Mathematics, or a similar field of study, or equivalent work experience
• Preferred
  • Hands-on experience with privileged access management tools such as CyberArk, BeyondTrust, Delinea, or similar solutions
  • Familiarity with Microsoft Entra ID and other modern identity platforms
  • Familiarity with Active Directory security assessment tools and methodologies, including attack path analysis and privilege escalation remediation
  • Experience integrating Active Directory with other platforms such as Linux systems and SaaS applications
  • Strong understanding of endpoint detection and response (EDR), endpoint security, and security monitoring solutions in Windows environments
  • Strong documentation and communication skills
  • A mindset for proactive problem-solving and continuous improvement
  • Microsoft certifications such as Microsoft Certified: Identity and Access Administrator Associate, Security Operations Analyst Associate, or Azure Solutions Architect

Key Skills

Education

Any Graduate