12 month contract, high possibility of extensions

JOB DESCRIPTION

Individual contributor IAM/Directory Services security engineer specializing in Tier 0 on-prem Active Directory. Owns domain controller hardening and security baselines, GPO administration, privileged access/delegation controls, and secure operation of AD dependencies (DNS, Kerberos/time, AD CS/PKI, trusts). Partners with SOC/SIEM teams to improve logging and audit readiness and supports AD security incident response and remediation.

REQUIRED SKILLS AND EXPERIENCE

• Bachelor’s degree in computer science, engineering, or a related field (or equivalent practical experience).
• 7+ years of experience with Windows Server and on-prem Active Directory (domain controller operations, replication, FSMO roles, trusts, Kerberos/LDAP).
• Experience securing AD dependencies: DNS, PKI/AD CS, and time synchronization; strong Windows authentication knowledge (Kerberos...