Senior Active Directory & Identity Security Consultant

Jobpal; Qatar; On-site; QAR 436,839 - 655,259; Full time

Job summary

Nair Systems in Qatar is seeking a Senior Active Directory & Identity Security Consultant to lead advanced AD health assessments, security hardening, and identity governance. You will design and optimize GPOs, DNS security, and PKI, while guiding multi-forest and hybrid identity deployments.

Required is 10+ years in AD administration with 5+ years in security hardening, plus hands-on experience with Entra ID and PAM solutions.

Qualifications

• 10+ years of Active Directory administration experience.
• 5+ years of Active Directory security hardening experience.
• Experience managing environments with multiple forests, domains, complex trusts and hybrid identity deployments.

Responsibilities

• Perform Active Directory health assessments and optimization.
• Implement AD security hardening and policy controls.
• Review and optimize GPO architecture and DNS security.
• Conduct multi-forest and trust reviews and Entra ID security assessments.
• Lead PowerShell automation and operational runbooks; transfer knowledge to operators.

Tools

Active Directory Domain Services

Group Policy

Loopback Processing

DNS Architecture

Windows Server 2016/2019/2022/2025

Kerberos

LDAP Security

AD Replication

AD Certificate Services

PKI

PowerShell

Microsoft Entra ID

Identity Governance

PAM Solutions

Zero Trust

Job description

Senior Active Directory & Identity Security Consultant

Nair Systems is currently looking for a Senior Active Directory & Identity Security Consultant for our Qatar operations.

Required Skills & Experience

Experience

• 10+ years of Active Directory administration experience.
• 5+ years of Active Directory security hardening experience.
• Experience managing environments with:
  • Multiple Forests
  • Multiple Domains
  • Complex Trust Relationships
  • Hybrid Identity Deployments

Technical Skills

• Expert‑level knowledge of Active Directory Domain Services
• Group Policy Design and Administration
• Loopback Processing
• DNS Architecture and Security
• Windows Server 2016/2019/2022/2025
• Kerberos Authentication
• LDAP Security
• AD Replication
• AD Certificate Services
• PKI Infrastructure
• PowerShell Automation
• Microsoft Entra ID
• Identity Governance

Security Expertise

• Hands‑on experience with Active Directory Hardening
• Identity Threat Detection
• Identity Security Posture Management
• PAM Solutions
• Tier‑0 Security
• Zero Trust Architecture
• Security AssessmentsAttack Path Remediation

Preferred Certifications

• Microsoft Certified: Identity and Access Administrator (SC-300)
• Microsoft Certified: Cybersecurity Architect (SC-100)
• Microsoft Security Operations Analyst (SC-200)
• Microsoft Certified Windows Server Hybrid Administrator
• CISSP
• CISM

Key Deliverables

• Active Directory Health Assessment
• AD Security Hardening Implementation
• GPO Architecture Review and Optimization
• DNS Security Assessment
• Multi‑Forest and Trust Review
• Identity Security Posture Assessment
• Tier‑0 Security Remediation
• Entra ID Security Review
• AD CS Security Assessment
• Knowledge Transfer and Operational Documentation
• PowerShell Automation and Operational Runbooks

Joining Time Frame

• 2 weeks (maximum 1 month)