Active Directory L3 Support Engineer

Pacer Group; Toronto; Hybrid; CAD 76,000 - 83,000; Part time

Job summary

Pacer Group is seeking an Active Directory L3 Support Engineer to join our Toronto-based team on a hybrid onsite contract basis. The role focuses on modernizing and securing AD services across production and disaster recovery environments, with hands-on work on AD DS, domain controllers, DNS, replication, and policy enforcement.

The ideal candidate brings strong PowerShell capabilities and experience in secure identity management within regulated enterprise settings, collaborating across

Qualifications

• Experience modernizing and securing AD services across production and disaster recovery environments.
• Hands-on expertise with AD DS, Domain Controllers, replication, DNS, and Group Policy.
• Experience replacing legacy Windows Server domain controllers and implementing highly available AD infrastructure.
• Strong knowledge of LDAP Signing, Channel Binding/LDAPS, SMB Signing, Kerberos hardening, NTLM security, and privileged account protection.
• Experience with AD CS, ADWS, Windows Server hardening, Zero Trust, and identity security remediation.
• Strong PowerShell skills for auditing, automation, remediation, and operational reporting.
• Experience working in regulated enterprise environments with security, audit, change management, documentation, and cross-team coordination.

Responsibilities

• Maintain and secure Active Directory in production and DR environments.
• Plan and implement domain controller replacements and AD infrastructure improvements.
• Audit and remediate AD security configurations and access controls.
• Collaborate with security, network, and application teams to enforce identity protections.

Skills

Active Directory

AD DS

Domain Controllers

DNS

Group Policy

PowerShell

Security & Compliance

Zero Trust

Cross-team coordination

Replication

Tools

AD CS

ADWS

Windows Server Hardening

Job description

Job Title: Active Directory L3 Support Engineer

Location: Toronto, ON

Work Arrangement: Onsite (hybrid)

Employment Type: Contract

Duration: 12 Months

Domain: BFSI

Pay Rate: CAD 55-60/hour Incorporated

Application Deadline: Sep 30th, 2026

SKILLS REQUIRED

• Seeking an experienced Active Directory Engineer to modernize and secure AD services across production and disaster recovery environments.
• Strong hands-on expertise with AD DS, Domain Controllers, replication, DNS, Group Policy, authentication, and AD disaster recovery is required.
• Experience replacing legacy Windows Server domain controllers and implementing resilient, highly available AD infrastructure.
• Strong knowledge of EPA, LDAP Signing, Channel Binding/LDAPS, SMB Signing, Kerberos hardening, NTLM security, and privileged account protection.
• Experience with AD CS, ADWS, Windows Server hardening, Zero Trust, and identity security remediation.
• Strong PowerShell skills for auditing, automation, remediation, and operational reporting.
• Experience working in regulated enterprise environments with security, audit, change management, documentation, and cross-team coordination.

EEOC Compliance:

We are an equal opportunity employer, and all qualified applicants will receive consideration for employment.