Full Time

Active Directory Administrator/Engineer

ApTask
Contract
Mid-Senior level
IT Services and IT Consulting
New York City Metropolitan Area
$115,000 - $165,000* / year (about $55–$79 an hour)

Job Description

Pay Rate: $80/hr on w2


Required Qualifications

  • Proven experience administering Active Directory in an enterprise environment.
  • Hands-on experience with Active Directory / AD DS and Forest / Domain Architecture.
  • Experience with Domain Controllers, Group Policy / GPO, and AD Replication.
  • Experience with DNS / Sites and Services and Trusts / Multi-Forest environments.
  • Strong PowerShell scripting skills.
  • Experience with AD Security Assessment / Hardening.
  • Working knowledge of Tier 0 / Privileged Access models.
  • Understanding of Kerberos / NTLM authentication.
  • Experience with LDAP Signing / Channel Binding.
  • Experience with LAPS / gMSA.
  • Experience with Delegation / ACLs.
  • Experience with Authentication Hardening.
  • Knowledge of Attack Paths / Privilege Escalation and how to mitigate them.
  • Experience with AD CS / PKI.
  • Experience with Forest Recovery / Disaster Recovery.
  • Experience with Microsoft Entra ID, Entra Connect, and Hybrid Identity.
  • Experience with Conditional Access, MFA, and PIM.


Preferred Qualifications

  • Relevant certifications such as Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Security Operations Analyst Associate, or Microsoft Certified: Azure Security Engineer Associate.
  • Experience with identity threat detection tools and security monitoring.
  • Experience in regulated industries with strict access control requirements.

Unemployment rose most in Finland: from 8.4% in 2024 to 9.5% in 2025, by the International Labour Organization’s estimates. Every country, ranked →

View Similar Jobs

Matches Jobs

Similar jobs which you may be interested in. Typically using your existing skillset.