Associate Director, Information Security

• Operate and maintain Active Directory domain services, including domain controllers, replication, security policies, and DNS integration.
• Monitor and troubleshoot identity-related performance, authentication, and replication issues.
• Implement and enforce security baselines, Group Policy Objects (GPO), delegation models, and privileged access controls.
• Drive automation efforts using PowerShell and infrastructure-as-code methodologies to reduce toil and improve efficiency.
• Manage lifecycle activities: patching, upgrades, schema changes, and deprecations.
• Support integration with cloud directory services (Azure AD / Entra ID) and hybrid identity components.

• Perform auditing, reporting, and compliance activities aligned with identity security best practices.
• Participate in incident response, RCA development, and problem management for identity-related events.
• Collaborate with cybersecurity teams to ensure protections against identity-based threat actors, including credential misuse and attack path exploitation.
• Contribute to resilience improvements, disaster recovery planning, backup strategy, and configuration drift control.

What were looking for:

• 5+ years experience supporting enterprise Active Directory environments.
• Strong understanding of identity authentication mechanisms (Kerberos, NTLM, LDAP, PKI).
• Hands-on experience with implementing and managing the Microsoft Active Directory Tiering Model.
• Hands-on experience with GPO management, RBAC delegation models, and domain controller hardening.
• Proficiency with PowerShell scripting for identity automation and orchestration.
• Familiarity with hybrid identity components such as AAD Connect, Entra Connect Sync, federation, and cloud-based authentication methods.
• Working knowledge of DNS/DHCP, certificates, and AD-integrated services.
• Experience troubleshooting replication, trust relationships, authentication flows, and authorization failures.
• Knowledge of identity governance, privileged access security, and identity threat detection tools.
• Understanding of Zero Trust principles applied to identity infrastructure.
• Experience in highly available, geographically-distributed enterprise environments.