Active Directory Security Engineer — Hybrid Entra & PKI

CTI Consulting; New York (NY); On-site; USD 110,000 - 160,000; Full time

Job summary

CTI Staffing partners with a leading financial information and technology organization to hire an Active Directory Administrator for their infrastructure team based in New York, NY. The role focuses on securing and maintaining a large multi-forest identity environment, extending into the cloud with Microsoft Entra ID.

You will own domain controllers, Group Policy, DNS, and replication health, perform security assessments, and implement Tier 0 and privileged access models while collaborating with

Qualifications

• Enterprise Active Directory administration across forests and domains
• Hands-on Group Policy, sites and services, trusts, multi-forest experience
• Strong PowerShell scripting for admin and reporting
• AD security assessment and hardening including Tier 0 and privileged access models
• Working knowledge of Kerberos, NTLM, LDAP signing, and channel binding
• Experience with LAPS, gMSA, delegation, and ACLs
• AD CS and PKI, plus forest recovery and disaster recovery
• Microsoft Entra ID, Entra Connect, Conditional Access, MFA, and PIM

Responsibilities

• Administer AD DS across forests, domains, and sites
• Own domain controllers, Group Policy, DNS, and replication health
• Run AD security assessments and hardening projects
• Implement and enforce Tier 0 and privileged access models
• Configure and monitor Kerberos, NTLM, LDAP signing, and channel binding
• Deploy and manage LAPS and gMSA, review delegation and ACLs for least privilege
• Manage Entra ID, Entra Connect, Conditional Access, MFA, and PIM in hybrid environments
• Automate administration and reporting with PowerShell, and partner with security teams on incidents and audits
• Plan and test forest recovery and disaster recovery

Skills

Active Directory

Group Policy

PowerShell

AD Security

Tier 0

Privileged Access

Kerberos

NTLM

LDAP Signing

LAPS

gMSA

ACLs

AD CS

PKI

Entra ID

Entra Connect

Conditional Access

MFA

PIM

Tools

PowerShell

Job description

CTI Staffing partners with a leading financial information and technology organization to hire an Active Directory Administrator for their infrastructure team based in New York, NY. The role focuses on securing and maintaining a large multi-forest identity environment, extending into the cloud with Microsoft Entra ID.

You will own domain controllers, Group Policy, DNS, and replication health, perform security assessments, and implement Tier 0 and privileged access models while collaborating with