Windows Active Directory Engineer

Senior Active Directory EngineerNew York City, NY (Hybrid, 3 days onsite)We're partnering with a highly respected global technology and financial information organization that operates one of the largest and most sophisticated enterprise infrastructures in the worldThis is an opportunity to join a team responsible for the core Windows and Identity infrastructure that supports thousands of users, critical business systems, and globally distributed environments. If you enjoy solving complex Active Directory challenges at enterprise scale and want to work on modernization, security, automation, and identity architecture initiatives, this role is worth a look.What You'll Be DoingArchitect, administer, and secure large-scale Active Directory environmentsDesign and support AD forests, domains, trusts, replication, and privileged access modelsLead Active Directory modernization and security hardening initiatiImplement and manage Group Policy, DNS, DHCP, and Windows Server infrastructureDeploy and support Windows security technologies including LAPS, Credential Guard, MFA, and credential theft mitigation controlsDevelop PowerShell automation to improve operational efficiency and consistencyAssess, identify, and remediate Active Directory vulnerabilities and security risksPartner with security, infrastructure, and engineering teams on identity and access management initiativesSupport compliance, auditing, and security governanceWhat We're Looking7+ years of enterprise Active Directory engineering experienceDeep expertise withActive Directory, Group Policy, DNS, Kerberos,NTLM authenticationStrong experience implementing AD security controls and hardening strategiesMulti-Factor Authentication