Active Directory Administrator/Engineer

ApTask; New York (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

ApTask seeks an experienced identity and access administrator to manage enterprise AD environments. You will administer AD, AD DS, and forest/domain architecture, oversee domain controllers, DNS, and trust configurations, and strengthen security posture through hardening practices and PAM controls.

The role emphasizes Kerberos/NTLM, LDAP signing, LAPS/gMSA, delegation, and recovery planning within hybrid identity ecosystems and regulatory contexts.

Qualifications

• Proven experience administering Active Directory in an enterprise environment.
• Hands-on experience with Active Directory / AD DS and Forest / Domain Architecture.
• Experience with Domain Controllers, Group Policy / GPO, and AD Replication.
• Experience with DNS / Sites and Services and Trusts / Multi-Forest environments.
• Experience with AD Security Assessment / Hardening.
• Working knowledge of Tier 0 / Privileged Access models.
• Understanding of Kerberos / NTLM authentication.
• Experience with LDAP Signing / Channel Binding.
• Experience with LAPS / gMSA.
• Experience with Delegation / ACLs.
• Experience with Authentication Hardening.
• Knowledge of Attack Paths / Privilege Escalation and how to mitigate them.
• Experience with AD CS / PKI.
• Experience with Forest Recovery / Disaster Recovery.
• Experience with Microsoft Entra ID, Entra Connect, and Hybrid Identity.
• Experience with Conditional Access, MFA, and PIM.

Skills

Active Directory

AD DS

Forest and Domain Architecture

Domain Controllers

Group Policy / GPO

AD Replication

DNS / Sites and Services

Trusts / Multi-Forest

AD Security Hardening

Tier 0 / Privileged Access

Kerberos / NTLM

LDAP Signing / Channel Binding

LAPS / gMSA

Delegation / ACLs

Authentication Hardening

Attack Paths / Privilege Escalation

AD CS / PKI

Forest Recovery / Disaster Recovery

Microsoft Entra ID / Entra Connect /hy

Conditional Access / MFA / PIM

Education

Microsoft Certified: Identity and Access Administrator Associate

Microsoft Certified: Security Operations Analyst Associate

Microsoft Certified: Azure Security Engineer Associate

Job description

• Proven experience administering Active Directory in an enterprise environment.
• Hands-on experience with Active Directory / AD DS and Forest / Domain Architecture.
• Experience with Domain Controllers, Group Policy / GPO, and AD Replication.
• Experience with DNS / Sites and Services and Trusts / Multi-Forest environments.
• Experience with AD Security Assessment / Hardening.
• Working knowledge of Tier 0 / Privileged Access models.
• Understanding of Kerberos / NTLM authentication.
• Experience with LDAP Signing / Channel Binding.
• Experience with LAPS / gMSA.
• Experience with Delegation / ACLs.
• Experience with Authentication Hardening.
• Knowledge of Attack Paths / Privilege Escalation and how to mitigate them.
• Experience with AD CS / PKI.
• Experience with Forest Recovery / Disaster Recovery.
• Experience with Microsoft Entra ID, Entra Connect, and Hybrid Identity.
• Experience with Conditional Access, MFA, and PIM.

Preferred Qualifications

• Relevant certifications such as Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Security Operations Analyst Associate, or Microsoft Certified: Azure Security Engineer Associate.
• Experience with identity threat detection tools and security monitoring.
• Experience in regulated industries with strict access control requirements.