Intone
From Intone's careers page
Status: listed on the employer's own careers page when we last checked (daily). Confirm on their site before applying.
We are seeking an Active Directory Architect for a two-year contract position based in Manhattan, New York.
We are seeking an Active Directory Architect for a two-year contract position based in Manhattan, New York. This role offers a hybrid work arrangement with three days onsite per week. You will join a team responsible for building and maintaining critical backend Microsoft infrastructure, contributing to the modernization of a global Active Directory infrastructure that serves thousands of engineers and systems worldwide.
Architect, administer, and secure Active Directory infrastructure in large enterprise environments
Design and implement Active Directory forests, domains, trusts, replication strategies, and privileged access models
Manage and implement Active Directory security controls and hardening initiatives
Deploy and manage Windows Local Administrator Password Solutions and credential management tools
Handle Privileged Access Management (PAM) responsibilities and Identity and Access Management (IAM) initiatives
Implement and support multi-factor authentication for key systems
Deploy and manage Windows security features such as Credential Guard and other credential theft mitigation technologies
Assess, remediate, and respond to Active Directory security vulnerabilities, misconfigurations, and security findings
Manage endpoint detection and response (EDR) solutions and credentialing tools
Ensure compliance with security governance, auditing, and regulatory requirements
Work with the team on identity lifecycle management and access control implementation
Required
7+ years of experience architecting, administering, and securing Active Directory in large enterprise environments
Deep expertise in Active Directory, Group Policy, DNS, DHCP, and Windows Server platforms
Strong hands-on experience implementing and managing Active Directory security controls and hardening initiatives
Experience deploying and managing Windows Local Administrator Password Solutions
Experience implementing and supporting multi-factor authentication for key systems
Experience deploying and managing Windows security features such as Credential Guard and other credential theft mitigation technologies
Strong understanding of identity lifecycle management, authentication protocols (Kerberos, NTLM), and access control models
Proven experience designing and implementing AD forests, domains, trusts, replication strategies, and privileged access models
Knowledge of Active Directory tiering, privileged access management, administrative workstation strategies, and least-privilege principles
Experience assessing and remediating Active Directory security vulnerabilities and misconfigurations
Proficiency in scripting and automation using PowerShell
Experience working in regulated environments with an emphasis on compliance, auditing, and security governance
Bachelor's degree in Computer Science, Engineering, Mathematics, or a similar field of study, or equivalent work experience
Hands-on experience with privileged access management tools such as CyberArk, BeyondTrust, Delinea, or similar solutions
Familiarity with Microsoft Entra ID and other modern identity platforms
Familiarity with Active Directory security assessment tools and methodologies, including attack path analysis and privilege escalation remediation
Experience integrating Active Directory with other platforms such as Linux systems and SaaS applications
Strong understanding of endpoint detection and response (EDR), endpoint security, and security monitoring solutions in Windows environments
Strong documentation and communication skills
A mindset for proactive problem-solving and continuous improvement
Microsoft certifications such as Microsoft Certified: Identity and Access Administrator Associate, Security Operations Analyst Associate, or Azure Solutions Architect
Scores your resume against this job the way resume scanners do: the job's hard and soft skills, searchability, recruiter tips and formatting.
Create a free account to see your score. Your resume stays in this browser until then, and we never store it.
Already a member? Sign in