Active Directory Engineer - Bedford Massachusetts

Company: Hybrid Pathways
Location: Bedford, Massachusetts
Posted On: 05/17/2024

About the opportunity:
Hybrid Pathways, a New Era company, is seeking an experienced Active Directory (AD) engineer to supplement the existing team and provide IAM strategy recommendations. - The candidate must have a strong background in designing, building, and maintaining complex global directory environments. - The candidate will be able to successfully perform the following activities: -
-

• Engineering, deploying, operationalizing, maintaining, and supporting tools associated with AD.
• Contributing to the engineering and support of AD as needed.
• Communicating service directions, feature, and roadmaps.
• Providing technical leadership to others with less knowledge or experience.
• Assist with currency and patching.
• Liaising with, training, and supporting operational teams.
• Participate in ad-hoc incident response for Active Directory/Active Directory platforms, when needed.
• Assist in technology evaluations and guiding proof of concepts.
• Participate in solution design discussions.
• Assist with remediating prioritized vulnerabilities in AD.
• Assist with disaster recovery planning for AD.
• Make recommendations for improving and securing the AD environment.
• Provide IAM strategy recommendations.
  Required Skills
  • Senior and experienced AD Engineer (5-7 years) with some Large Enterprise Experience.
  • 5+ years of experience in directory services engineering.
  • 2+ years in IAM strategy
  • Manufacturing experience
  • Good understanding of AD security
  • Experience with implementing and maintaining AD Tools:
  • Microsoft ATA/AATP/Defender for Identity
  • Microsoft ADRES (AD Recovery Execution Service)
  • Quest tools e.g., Change Auditor; Recovery Manager (RMAD); Enterprise Reporter; Migrations Manager (or Binary Tree's products)
  • Alternative vendor tools that fall into the same area
  • Experience with processes:
  • e.g., Supporting SOC
  • e.g., Periodic recovery testing of AD
  • Experience of AD Business Continuity and Disaster Recovery Planing and testing processes.
  • Experience with the following AD capabilities:
  • Microsoft Defender Credential Guard
  • Kerberos and insecure authentication protocols (e.g., NTLM etc.)
  • Group Policy Preferences administration for local administration accounts.
  • Local Security Authority
  • Domain Control Communications Digital Signing
  • SID History Reporting
  • Microsoft's Rapid Modernization Plan (RAMP) experience
  • OU Design
  • UEBA
  • MFA for Domain Administrators
  • Spooler Service Management Security
  • Object-Time to Live ("TTL") Auditing and Monitoring
  • Link-Local Multicast Name Resolution ("LLMNR")
  • Operationalizing Forest Level Backups
  • Ransomware defense for directory services
  • Domain administration script signing
  • Powershell auditing and logging
  • Excellent interpersonal communication skills with strong spoken and written English. -
  • Organizational skills with attention to detail.
  • Business outcomes mindset.
  • Solid balance of strategic thinking with detailed orientation.
  • Collaborative team worker - both in person and virtually using MS Teams or similar.
  • Self-starter, ability to take initiative.
  • Flexibility to accommodate working across different time-zones.
    Preferred Qualifications:
    • SAP Access Control
    • CISSP, CISM, or equivalent certification a plus.
      Required Education
      Bachelor's degree (BA/BS) from four-year college or university; or equivalent training, education, and work experience.
      About Us:
      Hybrid Pathways is a New England-based IT professional services company that assists mid-to-large enterprises with the implementation of secure IT environments that span on-premises and public cloud platforms. Be a part of a fast-paced, growing organization focused on doing great projects for great people.
      
      EEO Statement:
      Hybrid Pathways is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, marital status, national origin, genetics, disability, age, or veteran status. More...

          

      ---

      Register an account with us and set up job agents! We'll email you immediately when jobs like this are posted on our site.

      ---