Remote Senior Identity Security Architect: AD & Hybrid

The Stafford Gray Group; United States; Remote; USD 165.000 - 248.000; Vollzeit

Zusammenfassung

The Stafford Gray Group is hiring several Senior Identity Security Architects for long-term remote contracts. You will secure large enterprise Active Directory environments, design Tier 0 protection, and implement Just-in-Time access while orchestrating hybrid identity with Entra ID.

These roles require deep AD expertise, familiarity with ADCS and Kerberos, and experience using tools like BloodHound or Semperis. Travel for client meetings may occur a few times per year.

Qualifikationen

• Extensive hands-on experience securing Active Directory in large enterprise environments.
• Deep knowledge of ADCS, Kerberos, Tier 0 design, and privileged access.
• Experience with identity tooling and threat hunting integrations such as BloodHound, PingCastle, Purple Knight, Semperis, or Defender for Identity.

Aufgaben

• Assess and harden enterprise Active Directory environments, including forests, trusts, Kerberos, Group Policy, permissions, and delegation
• Secure Active Directory Certificate Services (ADCS) and remediate certificate-based attack paths
• Design and implement Tier 0 protection, including administrative tiering, privileged access workstations, and least privilege
• Identify and remediate attack paths, credential theft exposure, and lateral movement risk
• Secure hybrid identity between Active Directory and Microsoft Entra ID, including strong authentication and Conditional Access
• Implement Just-in-Time and Just-Enough Access to reduce standing privilege
• Plan and test Active Directory forest recovery and ransomware resilience
• Secure service accounts and other non-human identities

Kenntnisse

Active Directory

Kerberos

Privileged Access

ADCS

Just-in-Time Access

Hybrid Identity

Threat Modeling

Ausbildung

SC-100

SC-300

CRTP

CRTE

OSCP

CISSP

Tools

BloodHound

PingCastle

Purple Knight

Semperis

Microsoft Defender for Identity

Jobbeschreibung

The Stafford Gray Group is hiring several Senior Identity Security Architects for long-term remote contracts. You will secure large enterprise Active Directory environments, design Tier 0 protection, and implement Just-in-Time access while orchestrating hybrid identity with Entra ID.

These roles require deep AD expertise, familiarity with ADCS and Kerberos, and experience using tools like BloodHound or Semperis. Travel for client meetings may occur a few times per year.