Senior Windows & Active Directory Security Lead

PRI Technology; New York (NY); On-site; USD 286,541,000 - 315,195,000; Full time

Job summary

PRI Technology seeks a seasoned Windows/Active Directory Lead for a long-term contract to support and modernize a large-scale Microsoft infrastructure for a top-tier financial services firm. The role is part of a managed systems engineering team ensuring 24/7 availability of compute infrastructure worldwide.

The ideal candidate will architect, secure, and automate AD environments, implement MFA and LAPS, and advance security posture across a complex distributed Windows landscape.

Qualifications

• 7+ years of experience architecting, administering, and securing Active Directory in large enterprise environments.
• Strong expertise in Active Directory, Group Policy, DNS, DHCP, and Windows Server administration.
• Experience in CyberArk PAM.
• Hands-on experience implementing Active Directory security controls and hardening initiatives.
• Experience deploying and managing Windows Local Administrator Password Solution.
• Experience implementing and supporting MFA for key systems.
• Experience with Credential Guard and other credential theft mitigation solutions.
• Strong understanding of identity lifecycle management and authentication protocols (Kerberos/NTLM).

Responsibilities

• Design, administer, secure, and support large-scale Active Directory environments (forests, domains, trusts, replication, privileged access).
• Manage core Microsoft infrastructure services: AD, Group Policy, DNS, DHCP, Windows Server.
• Support modernization of enterprise identity and authentication services across dev and prod.
• Implement and maintain AD security controls, hardening, and remediation efforts.
• Deploy and manage LAPS and other privileged access security tools.
• Support MFA implementations for critical systems.
• Deploy and manage Windows security features like Credential Guard.
• Assess AD environments for risks, misconfigurations, and privilege escalation.
• Apply least-privilege principles and administrative tiering; secure workstations.
• Automate tasks, reporting, and operations with PowerShell.
• Collaborate with security, compliance, and infra teams for auditing and governance.
• Create and maintain clear technical docs and standards.

Skills

Active Directory

Group Policy

DNS

DHCP

Windows Server

CyberArk PAM

MFA

Credential Guard

PowerShell

Automation

Identity lifecycle

Kerberos/NTLM

Education

Bachelor's degree in CS/Engineering

Job description

PRI Technology seeks a seasoned Windows/Active Directory Lead for a long-term contract to support and modernize a large-scale Microsoft infrastructure for a top-tier financial services firm. The role is part of a managed systems engineering team ensuring 24/7 availability of compute infrastructure worldwide.

The ideal candidate will architect, secure, and automate AD environments, implement MFA and LAPS, and advance security posture across a complex distributed Windows landscape.