Senior Active Directory Security Engineer

Title: Senior Active Directory Security Engineer Location: Remote: – need to work EST/CST hours Duration: 6 +Months Contract. Interview Mode : Phone + Video Job Description: We are seeking a Senior Active Directory Security Engineer to support a large enterprise Active Directory security hardening and remediation initiative. This is a highly hands-on technical role focused on Tier 0 security, privileged access, identity infrastructure, authentication, and Active Directory hardening. The engineer will work closely with Active Directory engineering and architecture teams, cybersecurity teams, infrastructure teams, and application owners to identify security gaps, troubleshoot complex technical dependencies, and drive remediation activities through completion. This role requires someone who can operate as a senior technical SME—not simply coordinate remediation activities. The ideal candidate can independently investigate complex Active Directory issues, recommend technically sound solutions, and work directly with engineering and application teams to implement and validate those solutions.

Key Responsibilities

Lead and execute Active Directory Tier 0 security hardening and remediation activities. Assess and troubleshoot complex Active Directory issues at the engineering, architecture, and infrastructure levels. Identify Active Directory security gaps, vulnerabilities, configuration issues, and remediation requirements. Partner with AD engineering, architecture, cybersecurity, infrastructure, and application teams to implement security improvements. Work directly with application owners to identify and resolve dependencies preventing applications from meeting Tier 0 security requirements. Troubleshoot issues involving authentication, privileged accounts, service accounts, access controls, application integrations, and Active Directory configurations. Develop and implement remediation approaches for complex Active Directory security and infrastructure issues. Drive technical remediation activities from identification through implementation, testing, validation, and closure. Identify technical blockers, dependencies, and risks and recommend appropriate solutions or escalation paths. Validate completed remediation activities against established security and Tier 0 requirements. Communicate technical risks, remediation progress, and recommendations to both engineering teams and senior leadership. Provide technical documentation and knowledge transfer to internal teams.

Required Qualifications

Extensive hands-on Active Directory engineering, architecture, or infrastructure experience within large, complex enterprise environments. Deep understanding of Active Directory security and hardening best practices. Strong knowledge of Tier 0 / privileged identity security concepts and protection of critical identity infrastructure. Experience implementing Active Directory security remediation and enterprise security controls. Strong understanding of privileged access, authentication, service accounts, identity infrastructure, and application dependencies on Active Directory. Advanced troubleshooting skills with the ability to diagnose complex issues spanning Active Directory, authentication, applications, and infrastructure. Experience working directly with application and infrastructure teams to remediate security and configuration issues. Ability to independently own and drive technical problems from investigation through resolution. Strong communication skills with the ability to explain technical risks and recommendations to senior leadership while working hands-on with architects and engineers. Ability to work effectively across cybersecurity, identity, infrastructure, architecture, and application teams.