Active Directory Administrator/Engineer

Required Qualifications: Proven experience administering Active Directory in an enterprise environment. Hands-on experience with Active Directory / AD DS and Forest / Domain Architecture. Experience with Domain Controllers, Group Policy / GPO, and AD Replication. Experience with DNS / Sites and Services and Trusts / Multi-Forest environments. Strong PowerShell scripting skills. Experience with AD Security Assessment / Hardening. Working knowledge of Tier 0 / Privileged Access models. Understanding of Kerberos / NTLM authentication. Experience with LDAP Signing / Channel Binding. Experience with LAPS / gMSA. Experience with Delegation / ACLs. Experience with Authentication Hardening. Knowledge of Attack Paths / Privilege Escalation and how to mitigate them. Experience with AD CS / PKI. Experience with Forest Recovery / Disaster Recovery. Experience with Microsoft Entra ID, Entra Connect, and Hybrid Identity. Experience with Conditional Access, MFA, and PIM.

Preferred Qualifications: Relevant certifications such as Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Security Operations Analyst Associate, or Microsoft Certified: Azure Security Engineer Associate. Experience with identity threat detection tools and security monitoring. Experience in regulated industries with strict access control requirements.