• Active Directory Engineer

    Insight Global (New York, NY)


    Job Description

    A Large Media Client is seeking an Active Directory Engineer (Junior - Mid Level) to join their Identity Access Management Engineering team. Tis role will focus on the design, implementation, and management of the secure Active Directory (AD) services across a globally distributed enterprise environment. The Engineer will lead enhancements to AD security, including risk assessments, secure configurations, monitoring, and automation. A key responsibility in this role is collaboration with the InfoSec teams and cross-functional stakeholders to develop and integrate access management solutions.

    Key Responsibilities;

    • Creating, modifying, and disabling user accounts

    • Managing group memberships and understanding group scopes (global, universal, domain local)

    • Organizational Unit (OU) Navigation

    • Understanding AD structure and moving objects between OUs

    • Applying basic Group Policy Objects (GPOs) at the OU level

    • Password and Account Policies

    • Resetting passwords, unlocking accounts, and enforcing password complexity

    • Familiarity with account lockout thresholds and expiration settings

    • Basic Troubleshooting

    • Diagnosing login issues, replication delays, and DNS-related problems

    • Using tools like Event Viewer, Active Directory Users and Computers (ADUC), and RSOP.msc

    • Security Awareness

    • Understanding least privilege principles

     

    Recognizing the importance of disabling unused accounts and avoiding shared credentials

     

    We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [email protected] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

     

    Skills and Requirements

     

    Experience in Active Directory (AD) and working knowledge of tools currently available to support AD.

     

    Experience of Active Directory Group Policy Objects (GPO) and OUs.

     

    Understanding of basic networking concepts

     

    Deep technical understanding of MS Active Directory Domain Services.

     

    Server hardware experience, out-of-band management and patching.

     

    Knowledge of password vault solutions, JITA access and virtualization: Netwrix, CyberArk, Hyper-V.

     

    Experience creating and maintaining architecture diagrams, design diagrams and data flow diagrams using Microsoft Visio or other equivalent tools