Security Engineer (Directory Services)

Should be willing to work onsite 3x a week.

Required Skills & Experience

• 3 7 years of hands-on experience in:
• Active Directory administration/engineering
• Microsoft Entra ID (Azure AD)
• Azure AD Connect / hybrid identity environments
• Experience with:
• AD security hardening
• Identity-related attack techniques (privilege escalation, lateral movement)
• Attack path analysis or remediation activities
• Strong working knowledge of:
• Tier 0 concepts and identity as a control plane
• Authentication protocols (Kerberos, NTLM, SAML, OAuth)

Preferred Experience

• Exposure to:
• CyberArk or other PAM tools
• Saviynt or similar IGA platforms
• Ping Identity or federation solutions
• HashiCorp Vault, Keyfactor, or PKI environments
• Experience supporting AD forest recovery exercises
• Familiarity with Zero Trust principles

Key Traits for Success

• Strong execution and delivery focus
• Security and resiliency mindset
• Ability to quickly identify and remediate risks
• Works effectively in a cross-functional cybersecurity environment
• Comfortable working in fast-paced, project-driven (contract) engagements