Active Directory Engineer

Perennial Resources International; New York (NY); On-site; USD 120,000 - 150,000; Full time

Job summary

Perennial Resources International is seeking a senior Active Directory security architect to design and operate large enterprise AD environments, implement hardening controls, and manage threat mitigations. The role requires deep AD expertise, policy implementation, and hands-on scripting using PowerShell.

You will lead identity lifecycle efforts, integrate with Linux and SaaS, and drive compliance and audit readiness in regulated settings. A strong AD certification path is preferred.

Qualifications

• 7+ years of experience architecting, administering, and securing Active Directory in large enterprise environments.
• Deep expertise in Active Directory, Group Policy, DNS, DHCP, and Windows Server platforms.
• Strong hands-on experience implementing and managing AD security controls and hardening initiatives.
• Experience deploying and managing Windows Local Administrator Password Solution.
• Experience implementing and supporting MFA for key systems.
• Experience deploying and managing Windows security features such as Credential Guard, and other credential theft mitigation technologies.
• Strong understanding of identity lifecycle management, authentication protocols (Kerberos, NTLM), and access control models.
• Proven experience designing and implementing AD forests, domains, trusts, replication strategies, and privileged access models.
• Knowledge of Active Directory tiering, privileged access management, administrative workstation strategies, and least-privilege principles.
• Experience assessing and remediating Active Directory security vulnerabilities and misconfigurations.
• Proficiency in scripting and automation using PowerShell.
• Experience working in regulated environments with an emphasis on compliance, auditing, and security governance.
• A Degree in Computer Science, Engineering, Mathematics, similar field of study, or equivalent work experience
• Familiarity with Active Directory security assessment tools and methodologies, including attack path analysis and privilege escalation remediation.
• Experience integrating AD with other platforms (e.g. Linux systems, SaaS applications).
• Strong understanding of EDR, endpoint security, and security monitoring solutions in Windows environments.
• Strong documentation and communication skills.
• A mindset for proactive problem-solving and continuous improvement.
• Microsoft certifications such as Microsoft Certified: Identity and Access Administrator Associate, Security Operations Analyst Associate, or Azure Solutions Architect

Skills

Active Directory

Group Policy

DNS

DHCP

Windows Server

PowerShell scripting

Security governance

MFA implementation

Credential Guard

Identity lifecycle management

Kerberos/NTLM

Privileged access management

Least-privilege

Documentation and communication

Problem-solving

Education

Bachelor's degree in Computer Science or related field

Tools

EDR

Endpoint security solutions

Job description

• 7+ years of experience architecting, administering, and securing Active Directory in large enterprise environments
• Deep expertise in Active Directory, Group Policy, DNS, DHCP, and Windows Server platforms
• Strong hands-on experience implementing and managing Active Directory security controls and hardening initiatives
• Experience deploying and managing Windows Local Administrator Password Solution
• Experience implementing and supporting MFA for key systems
• Experience deploying and managing Windows security features such as Credential Guard, and other credential theft mitigation technologies
• Strong understanding of identity lifecycle management, authentication protocols (Kerberos, NTLM), and access control models
• Proven experience designing and implementing AD forests, domains, trusts, replication strategies, and privileged access models
• Knowledge of Active Directory tiering, privileged access management, administrative workstation strategies, and least-privilege principles
• Experience assessing and remediating Active Directory security vulnerabilities and misconfigurations
• Proficiency in scripting and automation using PowerShell
• Experience working in regulated environments with an emphasis on compliance, auditing, and security governance
• A Degree in Computer Science, Engineering, Mathematics, similar field of study, or equivalent work experience
• Familiarity with Active Directory security assessment tools and methodologies, including attack path analysis and privilege escalation remediation
• Experience integrating AD with other platforms (e.g. Linux systems, SaaS applications)
• Strong understanding of EDR, endpoint security, and security monitoring solutions in Windows environments
• Strong documentation and communication skills
• A mindset for proactive problem-solving and continuous improvement
• Microsoft certifications such as Microsoft Certified: Identity and Access Administrator Associate, Security Operations Analyst Associate, or Azure Solutions Architect