Active Directory Administrator/Engineer

• Proven experience administering Active Directory in an enterprise environment. \n

• Hands-on experience with Active Directory / AD DS and Forest / Domain Architecture. \n

• Experience with Domain Controllers, Group Policy / GPO, and AD Replication. \n

• Experience with DNS / Sites and Services and Trusts / Multi-Forest environments. \n

• Strong PowerShell scripting skills. \n

• Experience with AD Security Assessment / Hardening. \n

• Working knowledge of Tier 0 / Privileged Access models. \n

• Understanding of Kerberos / NTLM authentication. \n

• Experience with LDAP Signing / Channel Binding. \n

• Experience with LAPS / gMSA. \n

• Experience with Delegation / ACLs. \n

• Experience with Authentication Hardening. \n

• Knowledge of Attack Paths / Privilege Escalation and how to mitigate them. \n

• Experience with AD CS / PKI. \n

• Experience with Forest Recovery / Disaster Recovery. \n

• Experience with Microsoft Entra ID, Entra Connect, and Hybrid Identity. \n

• Experience with Conditional Access, MFA, and PIM. \n

n \n

• Relevant certifications such as Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Security Operations Analyst Associate, or Microsoft Certified: Azure Security Engineer Associate. \n

• Experience with identity threat detection tools and security monitoring. \n

• Experience in regulated industries with strict access control requirements. \n