Directory Services Engineer/ Identity Security / Hybrid

A major enterprise organization is seeking a Cybersecurity Engineer focused on Directory Services and Identity Security for a long-term contract engagement. This role supports critical identity infrastructure across hybrid environments, leveraging technologies such as Active Directory, Microsoft Entra ID (Azure AD), Entra Connect, PowerShell, and enterprise security platforms. The position is ideal for an experienced engineer who enjoys hands-on execution within complex, security-driven environments., * 5+ years of experience administering Active Directory environments

• Hands-on experience supporting Microsoft Entra ID (Azure AD)
• Experience implementing and managing Entra Connect / Azure AD Connect
• Strong understanding of domain controllers, forests, trusts, and authentication services
• Experience working within hybrid identity environments
• Knowledge of Tier 0 security concepts and privileged access controls
• Experience identifying and remediating identity-related security risks and misconfigurations
• PowerShell scripting and automation experience
• Experience executing infrastructure deployments, configurations, and operational changes
• Strong documentation and troubleshooting abilities

Desired Skills & Experience

• Experience with Multi-Factor Authentication and Conditional Access
• Exposure to CyberArk or other Privileged Access Management platforms
• Experience working with Identity Governance and Administration solutions such as Saviynt
• Familiarity with HashiCorp, Keyfactor, or similar secrets and certificate management platforms
• Experience supporting Active Directory backup, recovery, and resiliency initiatives
• Understanding of attack path analysis and privilege escalation remediation
• Experience supporting enterprise cybersecurity programs
• Knowledge of security hardening frameworks and identity protection best practices

What You Will Be Doing Tech Breakdown

• 45% Active Directory & Hybrid Identity Engineering
• 30% Identity Security Hardening & Attack Path Remediation
• 15% PowerShell Automation
• 10% Recovery, Resiliency & Identity Integrations