Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Active Directory Administrator | 12788 role.
Rezi rewrites your resume against CTI Consulting's job description. Free.
Tailor your resume to this Active Directory Administrator | 12788 role.
Rezi rewrites your resume against CTI Consulting's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Active Directory Administrator | 12788 posting at CTI Consulting — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Active Directory Administrator | 12788 posting at CTI Consulting — free, in seconds.
About the Role
CTI Staffing is partnering with a leading financial information and technology organization to find an Active Directory Administrator with security experience for their infrastructure team. The team runs a large, multi-forest identity environment that supports a global workforce. This role keeps it healthy, locked down, and recoverable, and extends it cleanly into the cloud with Microsoft Entra ID.
Responsibilities
- Administer Active Directory Domain Services across forests, domains, and sites
- Own domain controllers, Group Policy, DNS integration, and replication health
- Run AD security assessments and drive hardening work to completion
- Implement and enforce Tier 0 and privileged access models
- Configure and monitor Kerberos, NTLM, LDAP signing, and channel binding
- Deploy and manage LAPS and gMSA, and review delegation and ACLs for least privilege
- Find and close attack paths and privilege escalation risks
- Administer AD CS and PKI services, and plan and test forest recovery
- Manage Entra ID, Entra Connect, Conditional Access, MFA, and PIM across the hybrid environment
- Automate administration and reporting with PowerShell, and partner with security teams on incidents and audits
Requirements
- Proven enterprise Active Directory administration, including forest and domain architecture, domain controllers, replication, and DNS
- Hands-on Group Policy, sites and services, trusts, and multi-forest experience
- Strong PowerShell scripting for administration and reporting
- AD security assessment and hardening, including Tier 0 and privileged access models
- Working knowledge of Kerberos and NTLM, LDAP signing, and channel binding
- Experience with LAPS, gMSA, delegation, and ACLs
- AD CS and PKI experience, plus forest recovery and disaster recovery
- Microsoft Entra ID, Entra Connect, Conditional Access, MFA, and PIM
- Microsoft Identity and Access Administrator, Security Operations Analyst, or Azure Security Engineer certification
- Identity threat detection and security monitoring tools
- Experience in a regulated industry with strict access controls
- Experience identifying attack paths and privilege escalation with assessment tooling
- Documentation of standards, procedures, and architecture diagrams
Skills
- Active Directory Domain Services
- Group Policy
- AD CS and PKI
- DNS
- Microsoft Entra ID
- Entra Connect
- Conditional Access
- PIM
- PowerShell automation
- Kerberos
- NTLM
- LDAP signing
- Channel binding
- LAPS
- gMSA
- Delegation
- ACLs
- Forest recovery
- Disaster recovery
- Identity threat detection
- Security monitoring tools
Location
- New York, NY
Work Type
- Onsite
Experience Level
- Enterprise administration
- Hands-on experience
- Working knowledge
- Experience with
- Proven experience
Education Level
- Microsoft Identity and Access Administrator certification
- Security Operations Analyst certification
- Azure Security Engineer certification
About the Company
- Leading financial information and technology organization