Senior Identity Security Architect, Active Directory

Job not on LinkedIn

🔥 6 hours ago

❄️ Minnesota – Remote

❄️ Minnesota – Remote

⏳ Contract/Temporary

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Stafford Gray LLC

WebsiteLinkedInAll Job Openings

1 - 10 employees

🔒 Cybersecurity

☁️ SaaS

💼 Consulting

Cybersecurity • SaaS • Consulting

Stafford Gray LLC is a forward-thinking IT consulting firm based in Michigan, established in 2020. Specializing in driving innovation and efficiency, the company offers tailored IT solutions that focus on digital transformation, IT governance, cybersecurity, and project delivery. Stafford Gray works with both public and private sectors, providing services such as data analysis, artificial intelligence, automation, cloud services, and managed IT services. The firm is committed to empowering organizations through strategic digital solutions that promote growth, innovation, and operational excellence. With a strong emphasis on integrity, service quality, and measurable results, Stafford Gray is dedicated to helping clients achieve their business goals through cutting-edge technology and professional services.

📋 Description

• Assess and harden enterprise Active Directory environments, including forests, trusts, Kerberos, Group Policy, permissions, and delegation • Secure Active Directory Certificate Services (ADCS) and remediate certificate-based attack paths • Design and implement Tier 0 protection, including administrative tiering, privileged access workstations, and least privilege • Identify and remediate attack paths, credential theft exposure, and lateral movement risk • Secure hybrid identity between Active Directory and Microsoft Entra ID, including strong authentication and Conditional Access • Implement Just-in-Time and Just-Enough Access to reduce standing privilege • Plan and test Active Directory forest recovery and ransomware resilience • Secure service accounts and other non-human identities • Perform hands-on architecture and remediation for large enterprises • Explain technical risk clearly to client stakeholders

🎯 Requirements

• Extensive hands-on experience securing Active Directory in large enterprise environments • Deep knowledge of ADCS, Kerberos, Tier 0 design, and privileged access • Experience with tools such as BloodHound, PingCastle, Purple Knight, Semperis, or Microsoft Defender for Identity • Strong experience with Microsoft Entra ID and hybrid identity • Ability to explain technical risk clearly to client stakeholders • Identity governance (SailPoint, Saviynt, or Entra ID Governance), including access reviews and joiner, mover, leaver automation • Privileged access management tools such as CyberArk or BeyondTrust • Experience integrating identity telemetry with XDR or threat hunting • Certificate and cryptographic modernization or quantum readiness planning • Certifications such as SC-100, SC-300, CRTP, CRTE, OSCP, or CISSP • Contract role, W2 or 1099 • Fully remote, US-based • Long-term engagement

🏖️ Benefits

• Occasional travel for client meetings may be required, typically a few times per year