Active Directory (AD) Specialist

Role Overview

Seeking an experienced Active Directory (AD) Specialist to strengthen Microsoft AD cybersecurity controls for Identity and Access Management (IDAM) in a critical infrastructure environment. The role focuses on system discovery, policy development, security configuration, and implementation of best practices aligned with NIST 1800-2.

Key Responsibilities

• Strengthen AD Identity & Access Management (IDAM) controls based on organizational policies and industry best practices.
• Conduct AD system discovery, including:
  • User accounts
  • Authentication methods
  • Security policies
• Develop and implement account management policies covering:
  • Authorization
  • Account activation
  • Account modification
  • Account disabling
  • Account removal
  • Auditing
• Define and implement Role-Based Authorization (RBAC) and Least-Privilege Access strategies.
• Review, recommend, and configure advanced AD security features, including:
  • Automatic disabling of inactive accounts
  • Expansion of Multi-Factor Authentication (MFA)
  • Cryptographic key and certificate management
  • One-time-use passwords for remote sessions
  • Automatic session termination for local and remote access
  • Group Policy review and optimization
• Evaluate RADIUS authentication within AD, including compatibility and recommended improvements.
• Collaborate with stakeholders to develop an AD Forest Optimization Strategy.
• Prepare memoranda and workplans documenting AD enhancements and mapping them to identified assessment gaps.

Required Qualifications

• Strong experience with Microsoft Active Directory administration and security.
• Hands-on knowledge of:
  • RADIUS
  • TACACS+
  • MS-CHAPv2
  • EAP-TLS
  • Authentication protocols
  • Certificate management
• Familiarity with NIST 1800-2 and cybersecurity frameworks applicable to critical infrastructure.
• Strong experience designing and enforcing IDAM policies using least-privilege principles.
• Excellent documentation, communication, and stakeholder collaboration skills.

Workshops & Deliverables

• Participate in current-state review workshops.
• Participate in remediation planning workshops.
• Provide AD system recommendations.
• Develop an implementation roadmap for recommended AD security enhancements.
• Deliver memoranda and workplans mapped to assessment gaps.