Microsoft Active Directory Engineer

7+ years of experience architecting, administering, and securing Active Directory in large enterprise environments Deep expertise in Active Directory, Group Policy, DNS, DHCP, and Windows Server platforms Strong hands-on experience implementing and managing Active Directory security controls and hardening initiatives Experience deploying and managing Windows Local Administrator Password Solution Experience implementing and supporting MFA for key systems Experience deploying and managing Windows security features such as Credential Guard, and other credential theft mitigation technologies Strong understanding of identity lifecycle management, authentication protocols (Kerberos, NTLM), and access control models Proven experience designing and implementing AD forests, domains, trusts, replication strategies, and privileged access models Knowledge of Active Directory tiering, privileged access management, administrative workstation strategies, and least-privilege principles Experience assessing and remediating Active Directory security vulnerabilities and misconfigurations Proficiency in scripting and automation using PowerShell Experience working in regulated environments with an emphasis on compliance, auditing, and security governance A Degree in Computer Science, Engineering, Mathematics, similar field of study, or equivalent work experience We'd love to see: Familiarity with Active Directory security assessment tools and methodologies, including attack path analysis and privilege escalation remediation Experience integrating AD with other platforms (e.g. Linux systems, SaaS applications) Strong understanding of EDR, endpoint security, and security monitoring solutions in Windows environments Strong documentation and communication skills A mindset for proactive problem-solving and continuous improvement Microsoft certifications such as Microsoft Certified: Identity and Access Administrator Associate, Security Operations Analyst Associate, or Azure Solutions Architec

You'll be part of our Windows focused teams to manage the critical backend Microsoft infrastructure. You'll have the opportunity to contribute to modernizing global Active Directory (AD) infrastructure - a crucial backbone for authentication, authorization, and identity services across our development and production environment. You'll play a pivotal role in evolving our Windows Services architecture to meet the scale, complexity, and security demands of a highly distributed environment used by thousands of engineers and systems worldwide, ensuring it remains up to date with latest reliability and security best practices.