Gautam Buddha Nagar, Uttar Pradesh
Job Summary
Classification: InternalJob Description: Active Directory (AD) – Legacy Authentication & ProtocolElimination SpecialistRole TitleActive Directory Engineer / Identity Security Specialist – Legacy Authentication CleanupRole SummaryWe are seeking an experienced professional to support a security modernizationinitiative focused on eliminating legacy authentication protocols within ActiveDirectory environments. The role involves identifying, analyzing, and remediatingoutdated authentication mechanisms such as NTLM, LDAP (non-secure), SMBv1, andother weak protocols, ensuring alignment with modern security standards.Key Responsibilities• Assessment & Discoveryo Identify systems, applications, and services using legacy authenticationprotocols (e.g., NTLMv1/v2, LDAP simple bind, SMBv1).o Analyze authentication traffic using logs, monitoring tools, and auditingsolutions.o Perform Active Directory health checks and dependency analysis.• Remediation & Eliminationo Develop and execute a phased plan to eliminate legacy authenticationprotocols.o Migrate systems to secure alternatives such as Kerberos, LDAPS, andmodern authentication (Azure AD, OAuth, SAML).o Decommission or upgrade unsupported systems and applications.• Policy & Configuration Managemento Implement Group Policies (GPOs) to restrict or disable legacy protocols.o Enforce security baselines aligned with industry standards (e.g., Microsoftsecurity best practices).o Configure domain controllers and member servers for hardenedauthentication.• Monitoring & Reporting Classification: Internalo Continuously monitor authentication logs for legacy protocol usage.o Provide status reports, metrics, and risk assessments to stakeholders.o Track remediation progress and document improvements.• Stakeholder Collaborationo Work with application owners to identify compatibility issues andremediation strategies.o Coordinate with infrastructure, network, and security teams.o Provide technical guidance and awareness on secure authenticationpractices.Required Skills & Experience• Strong expertise in Active Directory Domain Services (AD DS).• Hands-on experience with: o NTLM auditing and restrictiono Kerberos authenticationo LDAP/LDAPS configurationo Group Policy management• Knowledge of legacy protocols and risks: o NTLM, SMBv1, unsigned LDAP, weak cipher usage• Familiarity with tools such as: o Event Viewer, PowerShell, Wireshark, Microsoft Defender for Identity• Experience in identity security, hardening, and remediation projectsPreferred Qualifications• Experience with Azure AD / Entra ID and hybrid identity environments• Knowledge of Zero Trust architecture principles• Certifications (preferred but not mandatory): o Microsoft Certified: Identity and Access Administrator Associateo Microsoft Certified: Security Operations Analyst Classification: Internal• Experience in large enterprise environments and transformation projectsKey Deliverables• Inventory of legacy authentication usage• Remediation roadmap and execution plan• Hardened AD environment with reduced attack surface• Documentation of eliminated protocols and controls implementedSoft Skills• Strong analytical and troubleshooting abilities• Effective communication and stakeholder management• Ability to work independently and drive initiatives• Attention to detail and security-focused mindsetProject ObjectiveTo eliminate legacy authentication protocols, reduce security vulnerabilities, andtransition to modern, secure authentication mechanisms, thereby strengthening theorganization’s identity security posture.
Key Responsibilities
1. Ensure On-Time Resolution And Quality Compliance Of Escalated Incidents By Analyzing Azure Active Directory Issues And Implementing Solutions In Accordance With Agreed Slas.
2. Mentor Administrators And Team Members By Providing Guidance On Azure Active Directory Best Practices, Preparing Standard Operating Procedures, And Maintaining Comprehensive Documentation.
3. Validate Change Order Implementation Plans And Ensure Human Error Compliance By Reviewing Processes And Participating In Capacity Planning Discussions Related To Azure Active Directory.
4. Actively Participate In Customer Meetings To Address Issues And Improve Customer Feedback And Satisfaction Regarding Azure Active Directory Services.
5. Conduct And Validate Analyses Such As Root Cause Analysis And Trend Analysis To Generate Reports That Support Performance Improvement Initiatives For Azure Active Directory Operations.
Skill Requirements
1. In-Depth Knowledge Of Azure Active Directory And Its Components
2. Strong Analytical Skills For Incident Resolution And Performance Analysis
3. Excellent Communication Skills For Stakeholder Engagement And Mentoring
4. Familiarity With Capacity Planning And Change Management Processes
5. Proficient In Documenting Processes And Creating Standard Operating Procedures
Other Requirements
1. Optional But Valuable: Microsoft Certified: Azure Administrator Associate
2. Optional But Valuable: Microsoft Certified: Azure Solutions Architect Exper
#body.unify div.unify-button-container .unify-apply-now: focus, #body.unify div.unify-button-container .unify-apply-#body.unify div.unify-button-container .unify-apply-now: focus, #body.unify div.unify-button-container .unify-apply-
