Job Description

Title: AD Specialist

Location: Remote

Duration: Contract

Necessary skills:

- Configuration, management, and troubleshooting of on-premises Multi-Domain Active Directory environments, including Domain Controllers, Group Policy Objects (GPOs), and Patch management.
- Strong Knowledge Active Direcotry replication, site topology design, and conflict resolution.
- Proficient knowledge of Kerberos authentication, NTLM, and secure credential handling.
- Configuring and managing Azure AD Connect for secure synchronization between on-premises Active Directory and Azure AD in hybrid identity environments.
- Install, configure, and maintain Windows Server operating systems, virtual machines, and Active Directory infrastructure to ensure high availability and security.
- Knowledge of Managing Virtual machines in Azure VMs, EC2 instances and VMware.
- Manage Azure AD Connect for seamless synchronization between on-prem AD and Azure AD, with a strong focus on maintaining integrity and performance of the on-prem identity source.
- Administer and monitor Microsoft Defender for Identity (MDI) sensors across domain controllers to detect and respond to identity-based threats.
- Design and implement authentication and authorization frameworks primarily for on-premises identity systems, with supplementary support for cloud identity platforms (Azure AD, AWS, GCP) as needed.
- Collaborate with internal teams and vendors to gather requirements and deliver robust Active Directory-based identity solutions, ensuring compatibility with enterprise applications and services.
- Develop and maintain architectural diagrams and documentation for on-prem identity infrastructure, including GPO structures, OU design, and trust relationships.
- Evaluate, design, and implement Active Directory and Single Sign-On (SSO) solutions, focusing on secure, scalable, and cost-effective identity management within the on-prem environment.
- Drive continuous improvement in IAM security architecture, enhancements to on-prem identity systems and introducing best practices for GPO management and AD hardening.
- Work closely with teams across information security, infrastructure, and architecture to ensure alignment of identity services with organizational goals and compliance requirements.

Good to have skills:

- Knowledge of Quest Active Roles Server, Recovery manager and Semperis
- Microsoft Certifications.
- Powershell Scripting

͏

Areas of responsibility

Monitoring and Incident Detection-Analyse attack trends and correlate logs across systems to identify advance threats. Enhance monitoring processes and implement improvements for faster detection, to ensure compliance with security frameworks and regulatory standards.

Incident Handling and Analysis-Perform root cause analysis, create incident response plans and implement disaster recovery measures to minimize business disruption

Threat Assessment and Analytics-Undertake forensic analysis using advanced analytics tools and implement mitigation measures to align with compliance requirements.

Stakeholder Coordination and Audit Assistance-"Liaise with cross functional teams, external vendors and auditors to ensure compliance with security frameworks.

Maintain audit documentation and ensure its accuracy while implementing processes that support audit readiness and continuous compliance."

Training and Awareness-Assist in creating and delivering cybersecurity awareness sessions, including guidance on phishing and malicious emails.

͏

͏

͏