Active Directory Specialist

Pacer Group; Toronto; Hybrid; CAD 83,000 - 85,000; Full time

Job summary

Pacer Group in Toronto, ON seeks an experienced Active Directory L3 Support Engineer for a 6-12 month contract. The role requires hands-on AD administration across multi-domain environments, with emphasis on domain controllers, DNS, Group Policy, and security hardening.

The position offers a hybrid work arrangement (4 days on-site per week) and a competitive CAD hourly rate. Ideal candidates will have PowerShell scripting expertise, experience with AD Certificate Services, and a strong track

Qualifications

• Hands-on administration of Active Directory Domain Services in multi-domain environments.
• Experience with domain controllers, replication, DNS, Group Policy and AD security.
• PowerShell scripting experience for audit, remediation, automation and reporting.
• Knowledge of Microsoft security controls including Kerberos hardening and SMB signing.
• Experience with AD Certificate Services and AD Web Services, and server hardening.
• Ability to remediate privilege escalation paths and insecure configurations.
• Strong PowerShell usage for audit, remediation and operational reporting.
• Plan and execute infrastructure upgrades and DC replacements.
• Familiarity with Zero Trust, privileged access management, identity security.

Skills

AD DS admin

Domain controllers

PowerShell

Security controls

AD CS

Privilege remediation

Audit automation

Infrastructure upgrades

Zero Trust

Job description

Job Title: Active Directory L3 Support Engineer

Location: Toronto, ON

Work Arrangement: Hybrid (4 days a week)

Employment Type: Contract

Duration: 06-12 Months

Pay Rate: CAD 60-62/hour Incorporated

Domain: BFSI

Application Deadline: Sept. 30th, 2026

SKILLS REQUIRED:

• Hands-on experience administering Active Directory Domain Services in multi-domain or multi-site enterprise environments.
• Strong knowledge of domain controllers, replication, DNS, Group Policy, authentication flows, and disaster recovery design for AD.
• Strong PowerShell scripting exp.
• Practical experience implementing Microsoft security controls such as EPA, LDAP signing, channel binding, Kerberos hardening, SMB signing, and privileged account protections.
• Experience with Active Directory Certificate Services, Active Directory Web Services, Windows Server hardening, and identity-related remediation programs.
• Ability to analyze and remediate privilege escalation paths, insecure account settings, and policy-based configuration weaknesses.
• Proficiency with PowerShell for audit, remediation, automation, and operational reporting.
• Experience planning and executing infrastructure upgrades, domain controller replacement, and controlled production changes.
• Familiarity with Zero Trust architecture, privileged access management, and identity security assessments.

EEOC Compliance:

We are an equal opportunity employer, and all qualified applicants will receive consideration for employment.

DISCLAIMER

AI Usage Policy: Pacer Group uses AI to assist in screening applications. Final hiring decisions are made by human recruiters based on qualifications and experience.