Active Directory Security Specialist in Chennai, भारत

Looking for an Active Directory Security Specialist to lead the design and delivery of AD security hardening for our https://jobeax.com/link/LImFOsbYKTTPb6Mb team exercises and compromise assessments consistently surface weaknesses in Active Directory, but the findings are rarely closed properly because doing so means changing authentication across the business without disrupting https://jobeax.com/link/7IP5gkTw8medOkwY will be the person who does that work: assessing the state of a client's Active Directory and Entra ID environment, translating findings from our own - and third - party assessments into a practical remediation plan, and driving that plan through to completion alongside the client's infrastructure https://jobeax.com/link/GAQw2xZfHsdWGuLm role is built on deep Active Directory architecture knowledge and hands on remediation experience, not on penetration https://jobeax.com/link/r8zBttN8F8XW0le9 Responsibilities :- Assess client Active Directory and Entra ID environments and produce a clear picture of privileged access exposure, misconfiguration and architectural weakness.- Take findings from red team exercises, compromise assessments and audits, and convert them into a prioritised, sequenced remediation plan with realistic effort and risk estimates.- Execute and oversee remediation : privileged access tiering, service account and delegation cleanup, group and permission rationalisation, Group Policy correction, certificate services configuration, legacy protocol retirement, LAPS deployment.- Harden hybrid identity, including Entra Connect, Conditional Access, privileged role management and federation configuration.- Test proposed changes before they reach production and advise clients accurately on operational impact and rollback.- Support Active Directory resilience work: backup isolation, forest recovery planning and tested recovery runbooks.- Document methodology, checklists and runbooks so the work becomes a repeatable Scybers service rather than an individual effort.- Support scoping calls, technical proposals and findings walkthroughs with client CISOs and infrastructure leads.- Mentor junior consultants and act as the escalation point for Active Directory questions across our https://jobeax.com/link/CXKDMBvtJncqpnv0 Requirements :- Six or more years working with Windows Server and Active Directory, including at least three years focused on Active Directory security or hardening.- Strong architectural understanding of Active Directory : domains, forests, trusts, replication, sites, Group Policy, DNS and the Kerberos and NTLM authentication flows.- Practical experience remediating Active Directory weaknesses in a live production environment, not in a lab.- Hands on experience with Active Directory assessment tooling such as BloodHound, PingCastle or Purple Knight, and the ability to interpret and act on the output.- Working knowledge of Entra ID and hybrid identity in production.- PowerShell scripting for administration and automation.- Ability to explain technical risk and remediation clearly to both engineers and senior business stakeholders.- Bachelor's degree in computer science, information technology or a related field, or equivalent practical https://jobeax.com/link/wG4xWp4WUrWMLMb3 Qualifications :- Experience delivering a privileged access tiering or Tier 0 isolation programme end to end.- Experience with Active Directory Certificate Services configuration and remediation.- Familiarity with identity threat detection tooling such as Microsoft Defender for Identity or Semperis.- Experience with Active Directory backup and forest recovery tooling.- Consulting or professional services background, working across multiple client environments.- Exposure to regulated environments and frameworks: RBI, SAMA, NCA ECC, PCI DSS, ISO 27001.- Certifications such as Microsoft SC - 300, AZ - 800 or AZ - 801, SANS SEC505, CRTP or CISSP.- Working knowledge of how Active Directory is attacked, sufficient to validate that a remediation has actually closed the issue (ref:hirist.tech)