Active Directory Engineer

We’re looking for an experienced Active Directory Engineer to help clean up, secure, and modernize a complex enterprise AD environment. This is a hands-on contract role where you’ll make a real impact by improving identity hygiene, strengthening security, and stabilizing replication across both on-prem and hybrid environments.

If you enjoy untangling messy environments, tightening security, and bringing structure to AD, this is a great short-term project with meaningful outcomes.

What You’ll Be Doing

• Clean up and optimize Active Directory (stale objects, legacy configurations, unused OUs, etc.)
• Improve AD structure, naming standards, and overall organization
• Identify and fix issues like duplicate SPNs, conflicting accounts, and misconfigured services
• Strengthen security across AD with modern best practices (CIS/NIST/Microsoft baselines)
• Support authentication hardening (Kerberos, reducing NTLM, etc.)
• Monitor and troubleshoot AD replication and domain controller health
• Clean up and standardize Group Policy (GPOs)
• Support Azure AD / Entra ID integration and resolve sync issues
• Contribute to documentation, governance, and long-term improvements

• 5+ years of hands-on experience with Active Directory and Windows Server
• Strong experience with:
• AD cleanup and restructuring
• Replication troubleshooting
• AD security hardening
• Solid PowerShell skills for automation and bulk changes
• Experience with Azure AD / Entra ID and hybrid identity
• Good understanding of authentication protocols (Kerberos, NTLM, etc.)

Nice to Have

• Experience with Zero Trust or tiered admin models
• Familiarity with identity security risks and mitigation
• Microsoft certifications (like SC-300 or Azure Admin)

$50 - $70 an hour - Contract, Pulled from the full job description

• Flexible schedule