Active Directory Security Architect

Employment: Permanent Role

Experience: 7+ years

Location: Sydney, Australia - Hybrid

Eligibility: Candidates must have the right to work in Australia (Citizen, PR, Valid Visa holders).

Key Responsibilities

• Conduct Active Directory health assessments, identify vulnerabilities, and recommend remediation strategies.
• Design and implement AD hardening solutions, including Tier 0/1/2 administration models and privileged access controls.
• Review, optimize, and standardize Group Policies (GPOs) aligned with security and compliance requirements.
• Lead security transformation initiatives including LDAPS enablement, SMB signing, NTLM hardening, and legacy protocol remediation.

Required Skills

• Strong expertise in Active Directory (AD DS), DNS, Group Policy, and Identity Security.
• Hands-on experience with LDAPS, Kerberos, NTLM security controls, and Privileged Access Management (PAM).
• Experience implementing Microsoft Security Baselines, CIS Benchmarks, and Zero Trust principles.
• Knowledge of Microsoft Entra ID, Microsoft Defender, and enterprise security architecture frameworks.
• Experience supporting compliance standards such as ISO 27001, NIST, and security governance frameworks.

Experience Required

• 8+ years of experience in Active Directory, Identity & Access Management, or Security Engineering.
• Proven experience delivering AD Hardening, Security Assessment, and Enterprise Transformation Programs.
• Relevant certifications such as Microsoft Security Engineer, Identity & Access Administrator, CISSP, or CISM are highly desirable.

Please drop your CV to ***email_hidden***