Senior Active Directory & Identity Security Engineer

Perennial Resources International; New York (NY); On-site; USD 120,000 - 150,000; Full time

Job summary

Perennial Resources International seeks an experienced Active Directory Security Architect to lead design, deployment, and hardening across large Windows environments. You will implement MFA, LAPS, and credential theft mitigations while guiding governance and compliance efforts with security teams.

You will also automate admin tasks with PowerShell, assess vulnerabilities, and design trusted AD topologies to reduce risk in regulated enterprise settings.

Qualifications

• 7+ years architecting, administering, and securing Active Directory in large enterprises.
• Deep expertise in AD, Group Policy, DNS, DHCP, and Windows Server.
• Strong hands-on experience implementing AD security controls and hardening.
• Experience deploying Windows LAPS and MFA for key systems.
• Experience with credential theft mitigation technologies and Credential Guard.
• Knowledge of Kerberos/NTLM and identity lifecycle management.
• Designing forests, domains, trusts, replication, and privileged access models.
• Familiar with AD security assessment tools and attack path analysis.
• Proficient in PowerShell scripting and automation.
• Degree in CS/Engineering/Math or equivalent experience.

Responsibilities

• Design and implement AD architectures, forests, and trusts for large enterprises.
• Evaluate and enhance AD security controls, hardening, and monitoring.
• Lead MFA deployment, LAPS rollout, and credential theft mitigation initiatives.
• Coordinate with security teams on governance, audits, and compliance.
• Automate administrative tasks with PowerShell and related tools.
• Assess vulnerabilities and remediate AD misconfigurations in regulated environments.

Skills

Active Directory

Group Policy

DNS

DHCP

Windows Server

MFA deployment

Credential Guard

Identity lifecycle management

Kerberos NTLM

Privileged access models

PowerShell scripting

Security governance

Communication skills

Problem solving

Education

Bachelor's degree in Computer Science or related field

Tools

AD security assessment tools

Job description

Perennial Resources International seeks an experienced Active Directory Security Architect to lead design, deployment, and hardening across large Windows environments. You will implement MFA, LAPS, and credential theft mitigations while guiding governance and compliance efforts with security teams.

You will also automate admin tasks with PowerShell, assess vulnerabilities, and design trusted AD topologies to reduce risk in regulated enterprise settings.