Microsoft Active Directory Engineer -Hybrid

Amtex Systems Inc is an information technology and talent solutions company offering talent and BI consulting to the companies in US for over 25 years.

Our solutions are designed to fill resource gaps, by providing the right candidates who deliver value to the organization. Our propensity to nurture and build strong relationships with our clients helps us better understand their business demands and gives us the ability to provide services that are on time and rise above the rest.

Microsoft Windows Active Directory Engineer

Location: NYC (Hybrid, 3 Days/Week onsite)

12 Months contract

Local candidates needed

W2 Need candidates authorized to work for any employer; Cannot sponsor

 

What’s in it for you:

You’ll be part of our Windows focused teams to manage the critical backend Microsoft infrastructure. You’ll have the opportunity to contribute to modernizing global Active Directory (AD) infrastructure — a crucial backbone for authentication, authorization, and identity services across our development and production environment. You’ll play a pivotal role in evolving our Windows Services architecture to meet the scale, complexity, and security demands of a highly distributed environment used by thousands of engineers and systems worldwide, ensuring it remains up to date with latest reliability and security best practices.

 

You’ll need to have:

7+ years of experience architecting, administering, and securing Active Directory in large enterprise environments

Deep expertise in Active Directory, Group Policy, DNS, DHCP, and Windows Server platforms

Strong hands-on experience implementing and managing Active Directory security controls and hardening initiatives

Experience deploying and managing Windows Local Administrator Password Solution

Experience implementing and supporting MFA for key systems

Experience deploying and managing Windows security features such as Credential Guard, and other credential theft mitigation technologies

Strong understanding of identity lifecycle management, authentication protocols (Kerberos, NTLM), and access control models

Proven experience designing and implementing AD forests, domains, trusts, replication strategies, and privileged access models

Knowledge of Active Directory tiering, privileged access management, administrative workstation strategies, and least-privilege principles

Experience assessing and remediating Active Directory security vulnerabilities and misconfigurations

Proficiency in scripting and automation using PowerShell

Experience working in regulated environments with an emphasis on compliance, auditing, and security governance

A Degree in Computer Science, Engineering, Mathematics, similar field of study, or equivalent work experience

 

We’d love to see:

Familiarity with Active Directory security assessment tools and methodologies, including attack path analysis and privilege escalation remediation

Experience integrating AD with other platforms (e.g. Linux systems, SaaS applications)

Strong understanding of EDR, endpoint security, and security monitoring solutions in Windows environments

Strong documentation and communication skills

A mindset for proactive problem-solving and continuous improvement

Microsoft certifications such as Microsoft Certified: Identity and Access Administrator Associate, Security Operations Analyst Associate, or Azure Solutions Architec