Active Directory Engineer; Chandler

Description

This role is responsible for designing, building, and maintaining automation frameworks that implement security-driven configuration changes across Windows servers, workstations, and Active Directory infrastructure in response to CVEs and emergent threats.

The engineer translates security intent into repeatable automated tasks that can be deployed safely y partner closely with cybersecurity teams to operationalize advisories and with AD platform teams to ensure changes align with enterprise standards.

• Automating GPO creation, modification, and rollback
• Automating Windows and application patch deployment
• Creating AD-safe configuration enforcement workflows
• Building guardrails that prevent unsafe or partial deployments
• Rapidly converting CVE guidance into deployable updates within hours
• Supporting break-glass? mitigation scenarios with pre-approved automation

• Active Directory (Expert level)
• Windows Server
• GPOs
• Powershell (Advanced)

• Active Directory (Expert level)
• Powershell (Advanced)
• Group Policy internals and management tools
• Windows Server and Windows client internals
• Active Directory schema, security descriptors, and replication behavior
• Configuration management (SCCM or equivalent)
• Git-based version control and code reviews
• GPO administration using Quest GP Admin