Start searching
Back to Jobs
Recently postedTechnology

Active Directory Engineer

Cloud Destinations LLCRaleigh, NC🇺🇸United States

Quick overview

SeniorityMid Senior
Work modeOn Site
LocationRaleigh, NC, United States
LDAPActive DirectoryPenetration TestingEncryptionPKIDNS

Job description

  • Title: Active Directory Engineer
  • Duration: 12 Months Contract
Key Responsibilities
  • Active Directory Upgrades: Execute and support enterprise-scale Active Directory upgrades, coordinating production deployments, application testing, and phased implementation activities.
  • Authentication Protocol Management: Diagnose and remediate authentication issues related to Kerberos and NTLM, including reducing reliance on legacy or less secure protocols in alignment with Microsoft security guidance.
  • LDAP Security: Support initiatives to eliminate unsigned LDAP binds and enforce LDAP signing across enterprise systems and applications.
  • Active Directory Security Remediation: Identify and resolve Active Directory security misconfigurations and vulnerabilities identified through penetration testing, security audits, security operations teams, and assessment tools.
  • DNS Administration and Troubleshooting: Manage and troubleshoot DNS configurations and dependencies associated with Active Directory, ensuring reliable name resolution and authentication services.
  • Application Integration and Troubleshooting: Work directly with application owners and technical teams to identify authentication dependencies, investigate application failures, and develop appropriate remediation plans.
  • Technical Collaboration: Partner with infrastructure, security, and application teams to coordinate remediation activities and minimize operational disruption.
  • Continuous Improvement: Proactively identify technical risks, recommend remediation opportunities, and advance assigned work independently.
  • Knowledge Sharing: Document technical findings, share expertise, and collaborate with team members to strengthen operational knowledge and support the development of broader Active Directory ownership.
Required Qualifications and Technical Skills
  • Demonstrated experience engineering, upgrading, and supporting Active Directory environments in large enterprise organizations.
  • Strong, in-depth knowledge of Kerberos authentication, including troubleshooting authentication failures and supporting the removal of legacy RC4 encryption.
  • Working to advanced knowledge of NTLM authentication, including identifying legacy protocol dependencies and supporting the retirement of weaker NTLM versions.
  • Working to advanced knowledge of LDAP and LDAP signing, including identifying unsigned bind dependencies and implementing secure configurations.
  • Proven experience identifying and remediating Active Directory security vulnerabilities and configuration issues.
  • Strong DNS knowledge, including troubleshooting DNS issues and understanding the relationship between DNS and Active Directory.
  • Experience troubleshooting application authentication issues and communicating technical findings to application owners and stakeholders.
  • Ability to work independently, prioritize remediation activities, and deliver technical changes in a structured enterprise environment.
  • Strong analytical, troubleshooting, documentation, and communication skills.
Preferred Qualifications
  • Experience with enterprise DNS and DHCP management platforms, such as BlueCat.
  • Familiarity with Public Key Infrastructure (PKI), Active Directory Federation Services (AD FS), and Windows Server administration.
  • Experience implementing or deploying Active Directory domain controllers.
  • Exposure to enterprise security assessments, vulnerability remediation, and identity infrastructure hardening.

Similar jobs

Apply