Lead Active Directory Engineer - Remote & Security Focused

N-iX; Medellín; Híbrido; COP 120.000.000 - 200.000.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible working format

Competitive salary and compensation

Education reimbursement

Professional development tools

Descripción de la vacante

N-iX is seeking a Lead Active Directory Engineer in Medellín to assess, clean up, and harden multiple inherited AD environments for a European online car market. You will design GPOs, OU structures, and RBAC models while integrating AD with IAM platforms and ensuring PCI DSS alignment.

The role requires hands-on expertise, SSO and identity lifecycle knowledge, and strong PowerShell skills to automate remediation and reporting. Flexible hybrid/remote work options are offered.

Formación

• 7+ years of hands-on AD engineering and administration.
• Experience in AD clean-up, consolidation, or post-transition work.
• AD architecture for single-domain environments at scale.
• Security hardening using tiered admin models and least privilege.
• Experience with integrating AD with IAM/IdP platforms (Azure AD / Entra ID, Okta).
• Familiar with PCI DSS or similar audit frameworks.
• Strong knowledge of Kerberos, NTLM, SAML/OIDC basics, DNS, and replication.
• Proficient in PowerShell for bulk changes and reporting.

Responsabilidades

• Perform comprehensive assessment of current AD environments.
• Identify and remediate inactive/stale objects and legacy permissions.
• Redesign OU structure and delegation model; implement GP strategy.
• Implement security hardening and privileged access controls.
• Integrate AD with IAM platforms, including SSO and identity lifecycle processes.
• Review and optimize AD Sites, DNS configuration, and replication topology.
• Develop cleanup/remediation plans with minimal disruption; automate tasks and reporting with PowerShell.
• Produce audit-ready documentation and operational standards.

Conocimientos

AD engineering

GPO design

OU design

AD security

PowerShell

Azure AD / Entra ID

SSO / IdP

RBAC

Identity lifecycle

Kerberos / NTLM

DNS / AD sites

Herramientas

ADUC

ADSIEdit

Group Policy Management Console

PowerShell (AD module)

Descripción del empleo

N-iX is seeking a Lead Active Directory Engineer in Medellín to assess, clean up, and harden multiple inherited AD environments for a European online car market. You will design GPOs, OU structures, and RBAC models while integrating AD with IAM platforms and ensuring PCI DSS alignment.

The role requires hands-on expertise, SSO and identity lifecycle knowledge, and strong PowerShell skills to automate remediation and reporting. Flexible hybrid/remote work options are offered.