Directory Services Engineer (Cybersecurity) W2

We are seeking a Directory Services Engineer to support critical cybersecurity initiatives focused on identity infrastructure security, Tier 0 protection, and resiliency. This role is hands-on and execution-focused, working across Active Directory, Microsoft Entra ID (Azure AD), and hybrid identity environments.

The engineer will play a key role in hardening identity systems, identifying attack paths, and implementing remediation actions to reduce enterprise risk.

Key Responsibilities

Identity Engineering & Operations
* Administer and support Active Directory (AD) and Microsoft Entra ID (Azure AD) environments.
* Implement and manage Azure AD Connect / Entra Connect for hybrid identity synchronization.
* Support domain controllers, forests, trusts, and authentication services.
* Execute identity-related changes, configurations, and deployments.

Security Hardening & Tier 0 Protection
* Implement security controls for Tier 0 assets (AD, Entra ID, domain controllers).
* Perform system hardening in alignment with cybersecurity standards.
* Support initiatives for privileged access restrictions and identity protection.
* Remediate identified security gaps and misconfigurations.

Attack Path Identification & Remediation
* Analyze and identify identity-based attack paths across on-prem and cloud environments.
* Support remediation efforts to eliminate:
o Privilege escalation paths
o Excessive permissions
o Identity misconfigurations
* Partner with cybersecurity teams to reduce identity attack surface.

Resiliency & Recovery Support
* Implement and validate Active Directory forest recovery procedures.
* Support backup, restore, and testing activities for identity systems.
* Assist in improving resiliency and recoverability of Tier 0 infrastructure.

Integration Support
* Assist in integration and configuration of identity with:
o MFA / Conditional Access
o PAM (e.g., CyberArk)
o IGA (e.g., Saviynt)
o Secrets and certificate platforms (e.g., HashiCorp, Keyfactor)
* Support identity governance and access control initiatives.

Automation & Execution
* Use PowerShell and scripting to automate identity tasks and remediation.
* Execute predefined engineering tasks, runbooks, and operational procedures.
* Document configurations, changes, and implementation steps.