Active Directory Specialist

Job Title: Active Directory L3 Support Engineer

Location: Toronto, ON

Work Arrangement: Hybrid (4 days a week)

Employment Type: Contract

Duration: 06-12 Months

Pay Rate: CAD 60-65/hour Incorporated

Domain: BFSI

Application Deadline: Sept. 30th, 2026

SKILLS REQUIRED:

Key Skills: NTLM, PowerShell, AD, LDAP signing, Zero Trust, CyberArk

• Hands-on experience administering Active Directory Domain Services in multi-domain or multi-site enterprise environments.
• Strong knowledge of domain controllers, replication, DNS, Group Policy, authentication flows, and disaster recovery design for AD.
• Strong PowerShell scripting exp.
• Practical experience implementing Microsoft security controls such as EPA, LDAP signing, channel binding, Kerberos hardening, SMB signing, and privileged account protections.
• Able to deploy and configure additional domain controllers across primary and disaster recovery sites, including DC01 and DC02, to improve availability, resilience, and site-level recovery readiness.
• Replace legacy Windows Server 2016 domain controllers and support platform modernization activities with minimal service disruption.
• Implement production and development network segmentation to reduce lateral movement risk and align identity services with Zero Trust principles.
• Enable Extended Protection for Authentication (EPA) and require SSL/TLS for privileged HTTP-based services such as AD CS and ADWS to reduce credential relay and man-in-the-middle exposure.
• Enforce SMB signing to help prevent tampering and NTLM relay over SMB sessions.
• Disable NTLMv1 and strengthen LDAP protections by enforcing LDAP signing and channel binding / LDAPS for directory communications.

EEOC Compliance:

We are an equal opportunity employer, and all qualified applicants will receive consideration for employment.

DISCLAIMER

AI Usage Policy: Pacer Group uses AI to assist in screening applications. Final hiring decisions are made by human recruiters based on qualifications and experience.