AD Security Remediation SME

IntelStack; Leinster; Hybrid; EUR 90,000 - 120,000; Full time

Job summary

IntelStack in Dublin is seeking a senior security professional to lead Active Directory security remediation within a large enterprise transformation. You will address critical AD vulnerabilities, reduce cyber risk, and strengthen resilience across global environments.

Working with security architects and engineers, you will govern AD CS, Kerberos, PAM, and hybrid identity, delivering remediation evidence and executive progress reporting while minimizing business disruption.

Qualifications

• Experience securing Active Directory in large enterprises.
• Knowledge of AD CS and certificate-based auth security.
• Experience with PAM and least-privilege design.
• Experience in production change and risk management.

Responsibilities

• Lead Active Directory security remediation across complex enterprise environments.
• Govern AD at Domain Admin and Enterprise Admin levels.
• Remediate identity-related vulnerabilities and privilege escalation risks.
• Review and harden AD CS, authentication, and delegation configurations.
• Manage privileged access controls, admin groups, and service accounts.
• Coordinate remediation across infrastructure, security, server, database and app teams.
• Plan, implement and govern production changes with minimal disruption.
• Produce remediation documentation and executive progress reports.
• Collaborate with security architects and stakeholders to drive outcomes.
• Support continuous improvement for identity security and cyber resilience.

Skills

Active Directory

AD security remediation

Kerberos authentication

Privileged Access Management

AD CS

Identity & Access Management

PAM governance

Security governance

Tools

CyberArk

BeyondTrust

Delinea

PingCastle

Job description

Location: Ireland: Arthur Ryan House, 22-24 Parnell Street, Dublin 1, D01 P7W2, Ireland, 2days a week

Duration: 1 Year

The Role

This role offers the opportunity to be part of a large-scale enterprise security transformation programme within a leading our client. The successful candidate will play a key role in strengthening the organisation's identity and access management landscape by addressing critical Active Directory security vulnerabilities, reducing cyber risk, and improving overall security resilience.

The role provides exposure to complex, multi-domain Active Directory environments and the opportunity to work with cutting-edge Microsoft identity and security technologies, including:

Active Directory Security Hardening and Remediation

Active Directory Certificate Services (AD CS)

Microsoft Identity & Access Management solutions

Group Managed Service Accounts (gMSA)

Privileged Access Management (PAM)

Enterprise Security Governance and Risk Management

Large-scale Production Change and Transformation Programmes

Working alongside senior security consultants, architects, project managers and infrastructure specialists, the individual will directly influence the delivery of a strategic security programme that enhances operational stability, regulatory compliance, and cyber resilience across a global enterprise environment.

Your responsibilities

Lead Active Directory security remediation activities across complex enterprise environments.

Perform administration and governance of Active Directory at Domain Admin and Enterprise Admin levels.

Assess, prioritize, and remediate identity-related security vulnerabilities, misconfigurations, and privilege escalation risks.

Review and harden Active Directory Certificate Services (AD CS), authentication, and delegation configurations.

Manage privileged access controls, administrative groups, service accounts, and permissions governance.

Coordinate remediation activities across infrastructure, security, server, database, and application support teams.

Plan, implement, and govern production changes while ensuring minimal business disruption and effective risk management.

Produce remediation documentation, validation evidence, and executive-level progress reporting.

Collaborate with security architects, project managers, and customer stakeholders to drive remediation outcomes.

Support continuous improvement initiatives to strengthen identity security, compliance, and cyber resilience.

Essential skills/knowledge/experience

Strong hands-on experience administering and securing Active Directory in large enterprise environments.

Proven expertise in Active Directory security remediation, hardening, and privilege reduction initiatives.

Deep knowledge of Active Directory Certificate Services (AD CS) and certificate-based authentication security.

Strong understanding of Kerberos authentication, delegation models, SPNs, and service account security.

Experience reviewing and remediating AD permissions, ACLs, privileged groups, and administrative access paths.

Knowledge of Microsoft Identity & Access Management, Privileged Access Management (PAM), and least-privilege principles.

Experience managing security remediation programmes within production environments, including change and risk management.

Ability to coordinate activities across infrastructure, security, application, database, and support teams.

Strong analytical, troubleshooting, and root-cause investigation skills for complex identity and security issues.

Excellent stakeholder management, communication, and documentation skills with experience working directly with customers and senior leadership.

Microsoft Entra ID (Azure AD) and hybrid identity management experience.

Experience with CyberArk, Beyond Trust, Delinea or other Privileged Access Management (PAM) platforms.

Exposure to Microsoft Defender for Identity and identity threat detection solutions.

Experience implementing Tiered Administration, ESAE/Red Forest, or other privileged access security models.

Knowledge of CIS, Microsoft Security Baselines, and industry best practices for Active Directory security.

Familiarity with vulnerability assessment tools such as PingCastle, BloodHound, Purple Knight, or similar AD security assessment platforms.

Experience supporting large-scale security transformation or remediation programmes in global enterprise environments.

Knowledge of SQL Server security, authentication, and privileged access governance.

Relevant certifications such as Microsoft Certified: Identity and Access Administrator, Security Operations Analyst, CISSP, CISM, or equivalent.

Experience working within regulated environments with strong governance, audit, and compliance requirements.