Active Directory Systems Administrators

MUST HAVES .

7+ years of relevant experience as a an Active Directory Specialist (Systems Admin)

1. Experience configuring domain controllers AND managing Active Directory forests

1. Experience with "LAPS (Local Admin, password, solutions) AND ACL's ( Access Control lists,) troubleshoot, clean up and fix

1. Experience implementing Zero Trust security models in AD environments

7+ years of relevant experience

- Responsibilities
-Work in complex, multi-domain, multi-forest environments,
-Analyze and remediate Active Directory security vulnerabilities identified in a cybersecurity audit.
-Implement security best practices across the AD infrastructure, ensuring compliance with banking and financial industry regulations.
-Triage Active Directory domain controllers, as required, ensuring their security, redundancy, and operational efficiency.
-Refactor Active Directory forests, including schema extensions and forest upgrades, as required to ensure audit compliance.
-Implement and/or modify group policy updates, access controls, and role-based access models to mitigate security risks.
-Enhance AD monitoring, logging, and auditing capabilities to support security and compliance efforts.
-Collaborate with cybersecurity, infrastructure, and compliance teams to ensure AD security aligns with corporate policies.
-Provide expertise in Active Directory Federation Services (ADFS) and related identity federation technologies.
-Ensure compliance with NIST, ISO 27001, FFIEC, SOX, and other financial security frameworks, as required by client and/or audit requirements.

Required Experience
-7+ years of experience managing Active Directory (AD) environments in enterprise settings.
-2+ years experience implementing AD solutions within banking/financial services environments.
-Deep expertise in Active Directory security, architecture, and administration.
-Proven experience in remediating AD security risks and implementing security controls.
-Strong knowledge of domain controllers, AD forests, AD trusts, and Group Policy.
-Experience with AD schema extensions, forest raises, and AD migrations.
-Hands-on experience managing complex AD environments in a banking or financial services institution.
-Knowledge of identity & access management (IAM) best practices in financial regulatory environments.
-Familiarity with Kerberos authentication, LDAP, SAML, and similar identity protocols.
-Strong understanding of PowerShell scripting for AD automation and security hardening.
-Experience working within SOX, PCI-DSS, FFIEC compliance frameworks.
-Microsoft Certifications (e.g., MCSE, Microsoft Certified: Identity and Access Administrator, Microsoft 365 Certified).
-Knowledge of Azure Active Directory (AAD) and cloud identity integrations.
-Experience implementing Zero Trust security models in AD environments.