Remote AD Security & Trust Engineer

Cloudica; Warszawa; On-site; PLN 448,000 - 634,000; Full time

Benefits offered by this job

PingCastle experience

CrowdStrike experience

Job summary

Cloudica is seeking an Active Directory Security & Trust Engineer for a US-based project focused on AD hardening and trust remediation in large, multi-forest enterprise environments. You will strengthen authentication, apply tiering models, and implement modern security controls to align with CIS standards.

You will analyze multi-source security data with Splunk, implement Tier-0/1/2 policies, and manage cross-domain trust relationships, driving remediation plans and reports.

Qualifications

• 4+ years in enterprise AD engineering with security hardening.
• Experience with multi-forest environments (50,000+ identities).
• Experience interpreting Splunk logs and trust paths.
• Proficient in PowerShell for AD tasks automation.

Responsibilities

• Analyze security data in Splunk to harden AD and improve trust.
• Implement tiering policies (Tier-0/1/2) and restrictive GPOs.
• Manage and optimize AD trust relationships across domains.
• Align Domain Controllers to CIS baselines; migrate from RC4 and reduce NTLMv1.
• Collaborate with owners to plan changes and validate remediation.
• Produce remediation plans and track progress in SIEM and spreadsheets.

Skills

AD security

Splunk

GPO

PowerShell

Kerberos/NTLM

Selective authentication

Tiered access

Communication

Tools

PingCastle

CrowdStrike

Job description

Cloudica is seeking an Active Directory Security & Trust Engineer for a US-based project focused on AD hardening and trust remediation in large, multi-forest enterprise environments. You will strengthen authentication, apply tiering models, and implement modern security controls to align with CIS standards.

You will analyze multi-source security data with Splunk, implement Tier-0/1/2 policies, and manage cross-domain trust relationships, driving remediation plans and reports.