Active Directory Security Engineer (Azure AD)

Motion Recruitment; Charlotte (NC); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Medical Insurance

Dental Benefits

Vision Benefits

PTO

401(k) including match

Job summary

Motion Recruitment in Charlotte, NC is seeking an Active Directory Security (AD Sec) Engineer to advance and secure its enterprise authentication and directory services infrastructure. You will own end-to-end AD security operations, focusing on robust access control and compliance for a dynamic user base.

In this role you will engineer and support secure Active Directory and Azure AD environments, manage privileged identities, lead hardening efforts, and design zero-trust policies.

Qualifications

• Strong expertise in Active Directory and Azure Active Directory security.
• Background implementing and managing identity governance solutions and privileged access management (PAM).
• Skilled in authentication and authorization protocols (Kerberos, NTLM, LDAP, OAuth, SAML).
• Hands-on experience with security hardening, access reviews, and incident response for directory attacks.
• Proficient with PowerShell or equivalent scripting for automation.
• Bachelor’s degree in information security, Computer Science, or related field or equivalent experience.

Responsibilities

• Monitor, analyze, and respond to security events within Active Directory and Azure AD.
• Engineer improvements to directory hardening, object protection, and delegation controls.
• Manage identity lifecycle, including onboarding, changes, and offboarding for privileged and sensitive accounts.
• Automate routine security tasks, access reviews, and reporting via scripts and orchestration tools.
• Partner with internal teams on security integration projects, GPO enforcement, and multifactor authentication.
• Document technical standards, configurations, and remediation processes.

Skills

AD security

PIM / PAM

Kerberos/NTLM/LDAP/OAuth/SAML

PowerShell scripting

Identity governance

Education

Bachelor’s degree in information security or CS

Tools

Splunk

Microsoft Sentinel

Job description

Motion Recruitment in Charlotte, NC is seeking an Active Directory Security (AD Sec) Engineer to advance and secure its enterprise authentication and directory services infrastructure. You will own end-to-end AD security operations, focusing on robust access control and compliance for a dynamic user base.

In this role you will engineer and support secure Active Directory and Azure AD environments, manage privileged identities, lead hardening efforts, and design zero-trust policies.