Administer a complex multi-forest Active Directory and hybrid Microsoft Entra ID environment. Responsibilities include domain controller, Group Policy, DNS, replication, PKI, privileged access, security hardening, attack-path reduction, Conditional Access, MFA, PIM, automation, incident support, and forest recovery planning.
About This Opportunity
CTI Staffing is partnering with a leading financial information and technology organization to find an Active Directory Administrator with security experience for their infrastructure team based in New York, NY.
The team runs a large, multi-forest identity environment that supports a global workforce. This role keeps it healthy, locked down, and recoverable, and extends it cleanly into the cloud with Microsoft Entra ID.
What You’ll Do
- Administer Active Directory Domain Services across forests, domains, and sites
- Own domain controllers, Group Policy, DNS integration, and replication health
- Run AD security assessments and drive hardening work to completion
- Implement and enforce Tier 0 and privileged access models
- Configure and monitor Kerberos, NTLM, LDAP signing, and channel binding
- Deploy and manage LAPS and gMSA, and review delegation and ACLs for least privilege
- Find and close attack paths and privilege escalation risks
- Administer AD CS and PKI services, and plan and test forest recovery
- Manage Entra ID, Entra Connect, Conditional Access, MFA, and PIM across the hybrid environment
- Automate administration and reporting with PowerShell, and partner with security teams on incidents and audits
Requirements
What You Bring
Must-Have:
- Proven enterprise Active Directory administration, including forest and domain architecture, domain controllers, replication, and DNS
- Hands-on Group Policy, sites and services, trusts, and multi-forest experience
- Strong PowerShell scripting for administration and reporting
- AD security assessment and hardening, including Tier 0 and privileged access models
- Working knowledge of Kerberos and NTLM, LDAP signing, and channel binding
- Experience with LAPS, gMSA, delegation, and ACLs
- AD CS and PKI experience, plus forest recovery and disaster recovery
- Microsoft Entra ID, Entra Connect, Conditional Access, MFA, and PIM
Nice-to-Have:
- Microsoft Identity and Access Administrator, Security Operations Analyst, or Azure Security Engineer certification
- Identity threat detection and security monitoring tools
- Experience in a regulated industry with strict access controls
- Experience identifying attack paths and privilege escalation with assessment tooling
- Documentation of standards, procedures, and architecture diagrams
Technical Environment:
- Active Directory Domain Services, Group Policy, AD CS and PKI, DNS
- Microsoft Entra ID and Entra Connect, Conditional Access, PIM
- PowerShell automation
What Success Looks Like:
- Within 3 months, you own day-to-day AD operations and have a prioritized hardening backlog
- Within 6 months, Tier 0 boundaries, LAPS, and LDAP signing are enforced and measurable attack paths are reduced
- Forest recovery and DR procedures are documented and tested
Similar Jobs
Consumer Web • eCommerce • Information Technology • Retail • Software • Analytics • App development
Engages Pro customers, identifies project needs, develops quotes and material lists, processes orders, coordinates fulfillment and delivery, and drives sales through relationships, credit programs, loyalty programs, and product solutions. The role also prospects for new customers, follows up on projects, collaborates with store teams, maintains the Pro Desk, and completes ongoing training.
Top Skills:
Lowe'S UExcelMS OfficeMicrosoft TeamsMyredvest
Consumer Web • eCommerce • Information Technology • Retail • Software • Analytics • App development
Provides fast, friendly checkout service; operates registers; processes payments, exchanges, and item scanning; assists customers and self-checkout users; answers questions; maintains a clean and safe workstation; and supports stocking, cart movement, and other store activities as needed.
Top Skills:
Cash RegisterComputerSelf-Checkout Systems
Consumer Web • eCommerce • Information Technology • Retail • Software • Analytics • App development
Receive and unload freight, stock shelves, organize backroom and top-stock merchandise, verify deliveries, and prepare customer orders. Operate forklifts, pallet jacks, scanners, and other store equipment while following safety and hazardous-material procedures. Assist customers and teammates, maintain a clean workspace, and support loading and staging delivery orders. Work is physically demanding and may include overnight shifts.
Top Skills:
BalersForkliftsOrder PickersOrders AppPallet JacksScannersZebra Phones
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
