Senior Active Directory Security Engineer

Job Description

Job Description

Role: Senior Active Directory Security Engineer
Location: Eden Prairie, MN- Onsite Job
Experience: 8 Year
Duration: 6-12 Months

Pay Rate: $50/hr(C2C) or $42/hr(W2)

Position Summary
The Senior Active Directory Security Engineer will participate in large-scale implementations across multiple medium- to high-complexity Active Directory environments. The role combines security hardening, engineering, operational support, advisory responsibilities, and project delivery to advance corporate security initiatives. This individual will support work intake, advise Active Directory teams and business owners on alignment with corporate security standards, and contribute to tactical and strategic objectives across broader programs.
The position will also serve as a key technical resource in securing, consolidating, and simplifying Active Directory environments resulting from mergers and acquisitions. Expected deliverables include Consultant and collaborative project work, leadership of small groups assigned to specific objectives, clear communication of issues and outcomes, technical documentation, investigation of unusual Active Directory activity, participation in audit reviews and investigations, ongoing stability and performance monitoring, and participation in a 24x7 on-call rotation.

Key Responsibilities
" Operationally manage and support the Active Directory infrastructure across multiple, separate enterprise environments.
" Engineer, implement, and maintain secure, stable, and scalable Active Directory services in medium- to high-complexity environments.
" Review, investigate, and remediate Active Directory performance irregularities identified through management and monitoring tools.
" Use security scanning and assessment tools to monitor the environment and maintain compliance with published baseline security standards.
" Partner with business owners and application teams to identify and remediate Active Directory security vulnerabilities.
" Advise Active Directory teams, business stakeholders, and application owners on security hardening requirements and corporate standards.
" Plan and support domain integrations, migrations, and consolidation activities, including environments acquired through mergers and acquisitions.
" Work with business and application teams to migrate applications to the Eligible to workum core Active Directory or Eligible to workum cloud environment.
" Investigate unusual Active Directory activity and participate in audit reviews, security investigations, and remediation efforts.
" Create and maintain clear technical documentation, communicate risks and outcomes, and provide timely status updates to stakeholders.
" Lead small technical workgroups assigned to defined goals or project deliverables.
" Monitor the ongoing stability, availability, security, and performance of Active Directory services.
" Participate in the 24x7 on-call rotation and respond to operational incidents as required.

Ideal Candidate Profile
The ideal candidate is a senior Active Directory Engineer or Architect with extensive experience delivering domain integration, migration, security hardening, and consolidation initiatives. The candidate should be comfortable managing multiple Consultant Active Directory infrastructures and partnering directly with business and application teams to strengthen the security of their use of Active Directory resources. Demonstrated experience preparing stakeholders and applications for migration to a core enterprise Active Directory or cloud environment is essential.

Required Qualifications
" 8 years of experience in Active Directory infrastructure engineering.
" 8 years of experience in Active Directory performance management and tuning.
" 6 years of experience in server hardware management.
" 6 years of experience in VMware ESX and/or Microsoft Hyper-V engineering and operations.
" Extensive experience with Active Directory domain integration, migration, consolidation, and security-hardening projects.
" Strong troubleshooting, analytical, technical documentation, and stakeholder communication capabilities.
" Ability to work Consultantly, collaborate across technical and business teams, and lead small groups toward defined objectives.
" Availability to participate in a 24x7 on-call rotation.

Preferred Skills and Technologies
" PowerShell scripting or programming
" VBScript and batch scripting
" System Center Operations Manager (SCOM)
" Microsoft Endpoint Configuration Manager (SCCM/MECM)
" Quest InTrust
" Quest Change Auditor
" Quest Enterprise Reporter
" Quest GPO Admin
" Quest Recovery Manager for Active Directory (RMAD)
" BloodHound Enterprise
" Microsoft Risk Assessment Program (RAP)
" Firewall engineering and operations
" Networking and subnetting
" Domain Name System (DNS)