Active Directory Support Engineer

Job Summary

We are seeking an experienced Active Directory Support Engineer to support and maintain enterprise-level AD infrastructure. The ideal candidate will have strong expertise in AD operations security hardening troubleshooting and automation along with the ability to work in a fast-paced production environment.

Key Responsibilities

• Security Hardening:
  
  Implement and enforce Active Directory security best practices including securing LDAP channels disabling legacy protocols (e.g. NTLM) and managing privileged accounts.
  
• Migration & Upgrades:
  
  Lead and support AD migrations functional level upgrades domain consolidations and Windows Server upgrades.
  
• AD Health Monitoring:
  
  Monitor domain controllers replication processes and DNS integration to ensure high availability and prevent outages.
  
• Production Changes:
  
  Execute patches promote domain controllers and manage configuration updates under strict change control processes (often during nights/weekends).
  
• Troubleshooting:
  
  Diagnose and resolve replication delays authentication failures and Group Policy issues using tools such as Repadmin and DCDiag.
  
• IAM & Team Support:
  
  Provide runbooks documentation and hands-on support to IAM and other support teams for AD-related issues.
  
• Compliance & Auditing:
  
  Ensure AD operations align with internal policies regulatory standards and audit requirements.
  
• Automation:
  
  Develop scripts (primarily using PowerShell) to automate routine operational tasks monitoring and reporting.
  
• Cross-Functional Collaboration:
  
  Work closely with cybersecurity networking and other technical teams to support business requirements.
  
• Documentation:
  
  Maintain technical documentation and share knowledge with internal teams (including IPEM).
  
• On-Call Support:
  
  Participate in on-call rotations including nights and weekends for critical incidents.
  

Required Experience

• 5 years of hands-on experience in Active Directory operations
  
  (Replication Domain Controller Management Group Policy Infrastructure)
  
• Strong experience with AD monitoring and troubleshooting tools
  
• Proficiency in scripting (PowerShell preferred)
  
• Experience with:
  • Privileged Access Management (PAM)
    
  • Zero Trust security principles
    
  • CIS benchmarks
    

Skills & Competencies

• Adaptability: Ability to manage shifting priorities in a dynamic environment
  
• Attention to Detail: High accuracy in configurations compliance and procedures
  
• Collaboration: Strong communication and teamwork skills across departments
  
• Proactiveness: Ability to identify risks propose solutions and meet tight deadlines
  

Work Environment

• Hybrid model (4 days onsite in Toronto)
  
• Flexible to work during off-hours for planned changes and incident management