[Remote] Senior Active Directory Security Engineer

Note: The job is a remote job and is open to candidates in USA. KPG99 INC is seeking a Senior Active Directory Security Engineer to support a large enterprise Active Directory security hardening and remediation initiative. The role focuses on Tier 0 security, privileged access, identity infrastructure, authentication, troubleshooting complex technical issues, and driving remediation through implementation, validation, and closure.

Responsibilities

• Lead and execute Active Directory Tier 0 security hardening and remediation activities
• Assess and troubleshoot complex Active Directory issues at the engineering, architecture, and infrastructure levels
• Identify Active Directory security gaps, vulnerabilities, configuration issues, and remediation requirements
• Partner with AD engineering, architecture, cybersecurity, infrastructure, and application teams to implement security improvements
• Work directly with application owners to identify and resolve dependencies preventing applications from meeting Tier 0 security requirements
• Troubleshoot issues involving authentication, privileged accounts, service accounts, access controls, application integrations, and Active Directory configurations
• Develop and implement remediation approaches for complex Active Directory security and infrastructure issues
• Drive technical remediation activities from identification through implementation, testing, validation, and closure
• Identify technical blockers, dependencies, and risks and recommend appropriate solutions or escalation paths
• Validate completed remediation activities against established security and Tier 0 requirements
• Communicate technical risks, remediation progress, and recommendations to both engineering teams and senior leadership
• Provide technical documentation and knowledge transfer to internal teams

Skills

• Extensive hands-on Active Directory engineering, architecture, or infrastructure experience within large, complex enterprise environments
• Deep understanding of Active Directory security and hardening best practices
• Strong knowledge of Tier 0 / privileged identity security concepts and protection of critical identity infrastructure
• Experience implementing Active Directory security remediation and enterprise security controls
• Strong understanding of privileged access, authentication, service accounts, identity infrastructure, and application dependencies on Active Directory
• Advanced troubleshooting skills with the ability to diagnose complex issues spanning Active Directory, authentication, applications, and infrastructure
• Experience working directly with application and infrastructure teams to remediate security and configuration issues
• Ability to independently own and drive technical problems from investigation through resolution
• Strong communication skills with the ability to explain technical risks and recommendations to senior leadership while working hands-on with architects and engineers
• Ability to work effectively across cybersecurity, identity, infrastructure, architecture, and application teams

Benefits

• Remote work; need to work EST/CST hours

Company Overview

Company H1B Sponsorship