Senior Active Directory Security Engineer

Role: Senior Active Directory Security Engineer
Location: Eden Prairie MN- Onsite Job
Experience: 8 Year
Duration: 6-12 Months

Pay Rate: $50/hr(C2C) or $42/hr(W2)

Position Summary
The Senior Active Directory Security Engineer will participate in large-scale implementations across multiple medium- to high-complexity Active Directory environments. The role combines security hardening engineering operational support advisory responsibilities and project delivery to advance corporate security initiatives. This individual will support work intake advise Active Directory teams and business owners on alignment with corporate security standards and contribute to tactical and strategic objectives across broader programs.
The position will also serve as a key technical resource in securing consolidating and simplifying Active Directory environments resulting from mergers and acquisitions. Expected deliverables include Consultant and collaborative project work leadership of small groups assigned to specific objectives clear communication of issues and outcomes technical documentation investigation of unusual Active Directory activity participation in audit reviews and investigations ongoing stability and performance monitoring and participation in a 24x7 on-call rotation.

Key Responsibilities
Operationally manage and support the Active Directory infrastructure across multiple separate enterprise environments.
Engineer implement and maintain secure stable and scalable Active Directory services in medium- to high-complexity environments.
Review investigate and remediate Active Directory performance irregularities identified through management and monitoring tools.
Use security scanning and assessment tools to monitor the environment and maintain compliance with published baseline security standards.
Partner with business owners and application teams to identify and remediate Active Directory security vulnerabilities.
Advise Active Directory teams business stakeholders and application owners on security hardening requirements and corporate standards.
Plan and support domain integrations migrations and consolidation activities including environments acquired through mergers and acquisitions.
Work with business and application teams to migrate applications to the Eligible to workum core Active Directory or Eligible to workum cloud environment.
Investigate unusual Active Directory activity and participate in audit reviews security investigations and remediation efforts.
Create and maintain clear technical documentation communicate risks and outcomes and provide timely status updates to stakeholders.
Lead small technical workgroups assigned to defined goals or project deliverables.
Monitor the ongoing stability availability security and performance of Active Directory services.
Participate in the 24x7 on-call rotation and respond to operational incidents as required.

Ideal Candidate Profile
The ideal candidate is a senior Active Directory Engineer or Architect with extensive experience delivering domain integration migration security hardening and consolidation initiatives. The candidate should be comfortable managing multiple Consultant Active Directory infrastructures and partnering directly with business and application teams to strengthen the security of their use of Active Directory resources. Demonstrated experience preparing stakeholders and applications for migration to a core enterprise Active Directory or cloud environment is essential.

Required Qualifications
8 years of experience in Active Directory infrastructure engineering.
8 years of experience in Active Directory performance management and tuning.
6 years of experience in server hardware management.
6 years of experience in VMware ESX and/or Microsoft Hyper-V engineering and operations.
Extensive experience with Active Directory domain integration migration consolidation and security-hardening projects.
Strong troubleshooting analytical technical documentation and stakeholder communication capabilities.
Ability to work Consultantly collaborate across technical and business teams and lead small groups toward defined objectives.
Availability to participate in a 24x7 on-call rotation.

Preferred Skills and Technologies
PowerShell scripting or programming
VBScript and batch scripting
System Center Operations Manager (SCOM)
Microsoft Endpoint Configuration Manager (SCCM/MECM)
Quest InTrust
Quest Change Auditor
Quest Enterprise Reporter
Quest GPO Admin
Quest Recovery Manager for Active Directory (RMAD)
BloodHound Enterprise
Microsoft Risk Assessment Program (RAP)
Firewall engineering and operations
Networking and subnetting
Domain Name System (DNS)

Disclaimer : Diverse Lynx LLC is an Equal Opportunity Employer. All applicants and employees are evaluated without discrimination based solely on their qualifications ability competence and performance. This email and its attachments may contain confidential or proprietary information and is intended only for the recipient(s). If you received this message in error please disregard it and notify the sender. If you no longer wish to receive our communications you may at any time.
Security Notice : Our official website is We do not operate or authorize any other websites representing Diverse Lynx LLC.

Required Experience:

Director