Job Title: Active Directory L3 Support Engineer

Location: Toronto, ON - Hybrid (4 Days WFO)

Duration: 06-12 Months

Hourly Pay Rate: 50 CAD/hr.

:

This role is responsible for strengthening and modernizing Active Directory services across production and disaster recovery environments. The engineer will manage domain controller expansion and replacement, improve authentication and directory security controls, remediate privileged-access weaknesses, and harden Group Policy and network configurations to reduce attack paths and support resilient enterprise identity services.

Required Skills & Qualifications

- Hands-on experience administering Active Directory Domain Services in multi-domain or multi-site enterprise environments.
- Strong knowledge of domain controllers, replication, DNS, Group Policy, authentication flows, and disaster recovery design for AD.
- Practical experience implementing Client security controls such as EPA, LDAP signing, channel binding, Kerberos hardening, SMB signing, and privileged account protections.
- Experience with Active Directory Certificate Services, Active Directory Web Services, Windows Server hardening, and identity-related remediation programs.
- Ability to analyze and remediate privilege escalation paths, insecure account settings, and policy-based configuration weaknesses.
- Proficiency with PowerShell for audit, remediation, automation, and operational reporting.
- Experience planning and executing infrastructure upgrades, domain controller replacement, and controlled production changes.

Preferred Skills & Qualifications





- Experience supporting regulated or highly controlled enterprise environments with robust audit, change management, and documentation expectations.
- Familiarity with Zero Trust architecture, privileged access management, and identity security assessments.
- Relevant Client certifications in Windows Server, Active Directory, security, or identity administration are advantageous.

Day-to-Day Responsibilities

- Deploy and configure additional domain controllers across primary and disaster recovery sites to improve availability, resilience, and site-level recovery readiness.
- Replace legacy Windows Server 2016 domain controllers and support platform modernization activities with minimal service disruption.
- Implement production and development network segmentation to reduce lateral movement risk and align identity services with Zero Trust principles.
- Maintain Active Directory health across replication, authentication, DNS integration, and Group Policy processing.
- Enable Extended Protection for Authentication (EPA) and require SSL/TLS for privileged HTTP-based services to reduce credential relay and man-in-the-middle exposure.
- Harden Group Policy baselines by enforcing event audit logging, PowerShell logging, supported encryption types, remote desktop best-practice settings, and secure administrator sign-in controls.
- Document remediation plans, implementation standards, and operational procedures to support audit readiness and ongoing compliance.

For immediate consideration please click APPLY to begin the screening process with Alex.

📌 Hiring Active DirectorySupport Engineer in Toronto, ON
🏢 Artech
📍 Toronto