Senior Identity Security Architect, Active Directory (Remote, Contract)
Core
Design and implement enterprise Active Directory security architecture, hardening, and remediation for large organizations.
Role type
Senior Identity Security Architect (Active Directory)
Builds
Secure Active Directory environments, hybrid identity solutions, and zero-trust access controls
Domain
Cybersecurity, Identity Management, Active Directory
Required skills
Active Directory hardening, ADCS security, Kerberos, Group Policy, privileged access management, hybrid identity, Microsoft Entra ID, attack path remediation, service account security
Preferred skills
Identity governance (SailPoint, Saviynt), Privileged Access Management (CyberArk, BeyondTrust), threat hunting integration, certificate modernization
Technologies
BloodHound, PingCastle, Purple Knight, Semperis, Microsoft Defender for Identity, Microsoft Entra ID, CyberArk, BeyondTrust
Responsibilities
Assess and harden enterprise Active Directory environments, Secure Active Directory Certificate Services (ADCS), Design and implement Tier 0 protection, Identify and remediate attack paths, Secure hybrid identity between Active Directory and Microsoft Entra ID, Implement Just-in-Time and Just-Enough Access, Plan and test Active Directory forest recovery, Secure service accounts and non-human identities
Seniority
Senior, hands-on IC
