Identity Security Architect

A major enterprise organization is seeking a Cybersecurity Engineer focused on Directory Services and Identity Security for a long-term contract engagement. This role supports critical identity infrastructure across hybrid environments, leveraging technologies such as Active Directory, Microsoft Entra ID (Azure AD), Entra Connect, PowerShell, and enterprise security platforms. The position is ideal for an experienced engineer who enjoys hands-on execution within complex, security-driven environments. This opportunity offers the chance to work on high-impact cybersecurity initiatives centered around Tier 0 protection, identity hardening, attack path remediation, and recovery readiness. The team is looking for someone who can bridge identity engineering and security operations, helping strengthen enterprise defenses while improving resiliency across critical systems. If you enjoy solving complex identity challenges, reducing security risk, and driving modernization efforts in hybrid environments, this role provides meaningful technical exposure and growth.

Contract Duration: 12+ Months

Required Skills & Experience

• 5+ years of experience administering Active Directory environments
• Hands-on experience supporting Microsoft Entra ID (Azure AD)
• Experience implementing and managing Entra Connect / Azure AD Connect
• Strong understanding of domain controllers, forests, trusts, and authentication services
• Experience working within hybrid identity environments
• Knowledge of Tier 0 security concepts and privileged access controls
• Experience identifying and remediating identity-related security risks and misconfigurations
• PowerShell scripting and automation experience
• Experience executing infrastructure deployments, configurations, and operational changes
• Strong documentation and troubleshooting abilities

Desired Skills & Experience

• Experience with Multi-Factor Authentication and Conditional Access
• Exposure to CyberArk or other Privileged Access Management platforms
• Experience working with Identity Governance and Administration solutions such as Saviynt
• Familiarity with HashiCorp, Keyfactor, or similar secrets and certificate management platforms
• Experience supporting Active Directory backup, recovery, and resiliency initiatives
• Understanding of attack path analysis and privilege escalation remediation
• Experience supporting enterprise cybersecurity programs
• Knowledge of security hardening frameworks and identity protection best practices

What You Will Be Doing Tech Breakdown

• 45% Active Directory & Hybrid Identity Engineering
• 30% Identity Security Hardening & Attack Path Remediation
• 15% PowerShell Automation
• 10% Recovery, Resiliency & Identity Integrations

Daily Responsibilities

• 80% Hands On
• 5% Management Duties
• 15% Team Collaboration

For applications and inquiries, contact:View email address on us.fitly.work