Active Directory Engineer

Active Directory Engineer with Power Shell

Hybrid 3 Days in 2 Days Remote (Chandler, AZ)

Analyze CVEs, MSRC advisories, and vendor security guidance to determine required remediation actions. Translate vulnerability intelligence into clear technical actions (patching, GPO updates, registry changes, service/protocol hardening). Define scope and applicability across Domain Controllers vs. Member Servers, Tiered environments, Legacy or exception-based systems. Assess dependencies, constraints, and potential blast radius prior to deployment. Evaluate exploitability vs. environmental exposure to inform prioritization.

Drive prioritization and sequencing of remediation activities across platforms. Design and develop automation solutions (primarily Power Shell) to deploy and validate fixes. Build repeatable validation mechanisms to ensure remediation effectiveness. Partner with Operations teams to ensure timely, coordinated rollout of remediations. Produce clear change documentation, including intent, impact, rollback considerations, and risk analysis.

• Deep understanding of Windows Server and Active Directory security architecture.
• Proven experience interpreting CVE writeups, Microsoft Security Response Center advisories, and vendor mitigation guidance.
• Expert-level proficiency in Power Shell scripting and automation development.
• Strong ability to evaluate exploitability vs. real‑world exposure.
• Familiarity with Active Directory attack paths and adversary techniques.
• Experience with Hyper‑V, SCVMM, SCCM, and Windows Server 2016/2019/2022.
• Experience performing risk analysis in large, regulated enterprise environments.
• Strong written communication skills; ability to produce change intent documents, impact and risk assessments, and technical/process documentation.
• Strong understanding of Active Directory internetworking: DNS, Kerberos, NTLM, LDAP.
• Hands‑on experience with Kerberos, LDAP, DNS, NTLM, and system performance monitoring.
• Experience in Python.
• Experience securing and reducing Active Directory attack surface, especially Domain Controllers.
• Experience developing AD policies, standards, and operational procedures.
• Strong analytical, design, and problem‑solving capabilities.
• Ability to translate complex technical concepts into clear, actionable processes.
• Experience operating in fast‑paced environments with shifting priorities.

Contract position based out of Chandler, AZ.

Pay range: $60.00 - $89.00/hr eligibility requirements apply to some benefits and may depend on job classification and length of employment. Benefits subject to change and may include:

• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan – Pre‑tax and Roth post‑tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long‑term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)

Hybrid position in Chandler, AZ.

This position is anticipated to close on Jun 11, 2026.

TEKsystems is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information, or any characteristic protected by law.

In compliance with the San Francisco Fair Chance Ordinance, qualified applicants with arrest and conviction records located in the city and county of San Francisco may be considered for employment.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

AN employer may use AI to support parts of the hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by the hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.