Security Engineer - Active Directory​/PAM

I have a long term contract opportunity for an Active Directory/ Priviledge Access Management Lead Engineer for one of our top tier global clients in Midtown Manhattan. This role will support privileged access management strategy and Active Directory implementations serving as the primary technical architect for PAM/AD initiatives within the organization.

This is 3 days onsite in Midtown Manhattan.

• Engineer enterprise-scale Active Director / PAM solutions across hybrid and cloud environments
• Lead large-scale, mission-critical PAM implementations and cloud transformations
• Design complex integrations and custom solutions for unique use cases
• Deep expertise in Active Directory, Group Policy, DNS, DHCP, and Windows Server platforms
• Strong hands-on experience implementing and managing Active Directory security controls and hardening initiatives
• Experience deploying and managing Windows Local Administrator Password Solution
• Experience implementing and supporting MFA for key systems
• Experience deploying and managing Windows security features such as Credential Guard, and other credential theft mitigation technologies
• Proven experience designing and implementing AD forests, domains, trusts, replication strategies, and privileged access models
• Knowledge of Active Directory tiering, administrative workstation strategies, and least-privilege principles
• Experience assessing and remediating Active Directory security vulnerabilities and misconfigurations
• Experience working in regulated environments with an emphasis on compliance, auditing, and security governance

• A Degree in Computer Science, Engineering, Mathematics, similar field of study, or equivalent work experience
• Experience architecting, administering, and securing Active Directory in large enterprise environments
• Familiarity with Active Directory security assessment tools and methodologies, including attack path analysis and privilege escalation remediation
• Strong understanding of EDR, endpoint security, and security monitoring solutions in Windows environments
• A mindset for proactive problem-solving and continuous improvement
• Microsoft certifications such as Microsoft Certified:
  Identity and Access Administrator Associate, Security Operations Analyst Associate, or Azure Solutions Architect