Active Directory L3 Support Engineer

Tata Consultancy Services; Toronto; On-site; CAD 90,000 - 110,000; Full time

Job summary

Tata Consultancy Services is seeking an Active Directory L3 Support Engineer in Toronto, Ontario. The successful candidate will manage Active Directory operations, focus on security hardening, and ensure compliance with standards.

This role involves troubleshooting, monitoring, and automating tasks using PowerShell. The salary ranges from CA$ 90,000 to CA$ 110,000 per year, with opportunities for on-call support and collaboration across teams.

Qualifications

• Proven experience in Active Directory migrations including functional level upgrades, domain consolidations, and Windows Server upgrades.
• Execute production changes following strict change control processes.
• Strong scripting skills with PowerShell.

Responsibilities

• Monitor Active Directory health including domain controllers, replication, and DNS integration.
• Provide support and guidance to IAM and other teams on Active Directory-related issues.
• Collaborate with cybersecurity, networking, and cross-functional teams.

Skills

Active Directory operations

Security hardening of Active Directory

Active Directory migrations

PowerShell scripting

Troubleshooting

Collaboration

Job description

Tata Consultancy Services (TCS) is an equal opportunity employer, and embraces diversity in race, nationality, ethnicity, gender, age, physical ability, neurodiversity, and sexual orientation, to create a workforce that reflects the societies we operate in. Our continued commitment to Culture and Diversity is reflected in our people stories across our workforce and implemented through equitable workplace policies and processes.

Active Directory L3 Support Engineer

Key Requirements

• Active Directory operations including replication, domain controller management, and Group Policy infrastructure
• Expertise in security hardening of Active Directory, including securing LDAP channels, disabling legacy protocols such as NTLM, and managing privileged accounts
• Proven experience in Active Directory migrations including functional level upgrades, domain consolidations, and Windows Server upgrades
• Monitor Active Directory health including domain controllers, replication, and DNS integration
• Execute production changes such as patching, domain controller promotion, and configuration updates following strict change control processes
• Troubleshoot issues such as replication delays, authentication failures, and Group Policy conflicts using tools like Repadmin and DCdiag
• Provide support and guidance to IAM and other teams on Active Directory-related issues
• Ensure compliance with internal policies, regulatory standards, and audit requirements
• Automate routine tasks using PowerShell scripting including log analysis and system health checks
• Collaborate with cybersecurity, networking, and cross-functional teams
• Maintain documentation and technical guides for processes and operations
• Participate in on‑call rotations including nights and weekends for critical incidents
• Hands‑on experience with Active Directory troubleshooting and monitoring tools
• Strong scripting skills with PowerShell
• Familiarity with PAM, Zero Trust principles, and CIS benchmarks

Skills & Mindset

• Adaptable with ability to handle shifting priorities
• Detail‑oriented with strong focus on accuracy and compliance
• Collaborative with clear communication across teams
• Proactive in identifying risks and driving solutions

Salary Range - CA$ 90,000 - CA$ 110,000 Per Year