Active Directory Engineer - INTL India

Insight Global

Northville Township, MI, United States

2 days ago

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Expert

Experience required

7 years minimum

Working hours

Regular working hours

Job source

www.juju.com

Tech stack

Active Directory Domain Controllers Integrated Windows Authentication Domain Name System (DNS) Identity and Access Management Kerberos (Protocol) Lightweight Directory Access Protocols (LDAP) Windows Servers NT LAN Manager Public Key Infrastructure Security Information and Event Management Data Logging

+2 more

Information Technology CIS Benchmarks

Job description

contributor IAM/Directory Services security engineer specializing in Tier 0 on-prem Active Directory. Owns domain controller hardening and security baselines, GPO administration, privileged access/delegation controls, and secure operation of AD dependencies (DNS, Kerberos/time, AD CS/PKI, trusts). Partners with SOC/SIEM teams to improve logging and audit readiness and supports AD security incident response and remediation.

Requirements

Bachelor’s degree in computer science, engineering, or a related field (or equivalent practical experience).
7+ years of experience with Windows Server and on-prem Active Directory (domain controller operations, replication, FSMO roles, trusts, Kerberos/LDAP).
Experience securing AD dependencies: DNS, PKI/AD CS, and time synchronization; strong Windows authentication knowledge (Kerberos/LDAP/NTLM).
Experience in enterprise IT operations or infrastructure teams, including change management and incident management for critical services.
AD security expertise (attack paths, privileged access, legacy authentication risk) with experience implementing hardening and monitoring. Hybrid identity/PAM familiarity is a plus; primary focus is on-prem AD domain security.