Active Directory Security Engineer

Immediate to 30 Days Joiners

Location: Hybrid/Gurgaon

Long Term Contract

We are seeking a senior, hands?on Active Directory Security Engineer to support a long?running programme of Active Directory hardening and enhancement. This role will focus on reducing technical debt, improving authentication security, and supporting application teams through protocol and service account remediation.

This is an independent contributor role, suited to an experienced engineer who can operate with minimal supervision.

Key Responsibilities

• Deliver Active Directory security hardening and enhancement across the enterprise
• Reduce legacy technical debt within Active Directory
• Lead authentication and protocol improvements, including:
• Migration from NTLMv2 to Kerberos
• Disabling RC4
• Enforcing LDAP channel binding
• Reviewing and remediating ACLs
• Assessing and potentially enabling SMB signing
• Improve service account hygiene, including analysis, remediation, and coordination with application teams
• Analyse authentication and security logs to identify risks and remediation actions
• Advise application teams on required changes and security impacts
• Work independently on protocol and identity?related issues without requiring day?to?day direction Required Skills & Experience
• Strong engineering background with deep Active Directory security expertise
• In?depth knowledge of Kerberos, NTLM, LDAP, SMB, and Windows authentication
• Proven experience hardening Active Directory in large or complex environments
• Strong troubleshooting and log analysis skills
• Ability to work autonomously and take ownership of complex security changes
• Clear communication skills when working with infrastructure and application teams