Find work in Canada.

A simpler way to find your next job.

Jobs in Canada

Save this search

CyberArk Support Engineer
PwC Canada
Toronto, ON
Full-time
As a Cyberark support Senior Associate, unlock your potential and embrace the chance to drive meaningful outcomes that’ll elevate your career. Your role will include, but isn’t limited to:
Technical Support Engineer
Soroc Technology
Toronto, ON
$50 to $60 CAD / hour
Contract
Active Directory L3 Support Engineer - NTLM, PowerShell, AD, LDAP signing, Zero Trust, CyberArk
Active Directory L3 Support Engineer
Net2Source (N2S)
Toronto, ON
$50 to $55 CAD / hour
Contract
Job Description: Active Directory L3 Support Engineer - NTLM, PowerShell, AD, LDAP signing, Zero Trust, CyberArk
Active Directory Support Engineer
Pacer Group
Toronto, ON
$50 to $60 CAD / hour
Contract
Experience with CyberArk for privileged access management (PAM), credential security, and access governance.
Added 1 hour ago
Windows Active Directory L3 Support Engineer
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
Full-time
Windows Active Directory L3 Support Engineer – NTLM, PowerShell, AD, LDAP Signing, Zero Trust, CyberArk
Windows Active Directory L3 Support Engineer
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
Full-time
Windows Active Directory L3 Support Engineer – NTLM, PowerShell, AD, LDAP Signing, Zero Trust, CyberArk
Enterprise CLM Operations Support Engineer – PKI, Venafi/CyberArk
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Brampton, ON
Full-time
Seeking an experienced Enterprise Certificate Lifecycle Management (CLM) Operations Support Engineer with hands-on experience in PKI, SSL/TLS certificate management, Venafi/CyberArk, ADCS,…
PAM Solution Support Engineer
Scotiabank
Toronto, ON
The PAM Solution Support Engineer is responsible for supporting the deployment, maintenance, and health of Privileged Access Management solutions across enterprise environments. This role…
Enterprise (CLM) Operations Support Engineer
J&M Group
Brampton, ON
Contract
Support large-scale certificate renewal events and emergency certificate replacement procedures.
Principal Identity & Access Management (IAM) Engineer
Aviso
Toronto, ON
$130,000 to $140,000 CAD / year
Full-time
We're looking to fill an opening for a Principal Identity & Access Management (IAM) Engineer to join our Technology Ops & Support Partners team.
Principal Identity & Access Management (IAM) Engineer
Aviso Wealth
Remote, Canada
$130,000 to $140,000 CAD / year
Full-time · Remote
We’re looking to fill an opening for a Principal Identity & Access Management (IAM) Engineer to join our Technology Ops & Support Partners team.
Active Directory Specialist
Pacer Group
Toronto, ON
$60 to $62 CAD / hour
Contract
Job Title: Active Directory L3 Support Engineer
Principal Software Escalation Engineer
Palo Alto Networks
Toronto, ON
Full-time
We are searching for an outstanding Principal R&D escalation engineer to join us on our journey to provide the best possible support for our customers.
OpenShift DevOps Engineer
Capgemini
Mississauga, ON
Full-time
We are seeking a highly motivated, adaptive, and self-managing DevOps Engineer with a strong technology background to support our global Development and Business teams. This role will be…
IT Systems Engineer
Aalyria
Canada
$115,000 to $145,000 USD / year
We’re looking for a hands-on IT Systems Engineer to join our team and own the day-to-day operation and continuous improvement of our corporate IT stack. This is a generalist IC role…
Added 9 hours ago
Sr Security Platform Engineer
Sun Life
Toronto, ON · Sun Life Toronto One York
Full-time
The Senior Security Platform Engineer is responsible for designing, implementing, supporting, and continuously enhancing Sun Life’s enterprise cryptographic security platforms, including…
Infrastructure Automation Engineering Specialist
CGI
Toronto, ON
Full-time
We are seeking a highly motivated and technically proficient Infrastructure Automation Engineer to join our growing Infrastructure and Automation team. The successful candidate will be…
Senior Manager, Engineering
TD
Toronto, ON
Full-time
The Senior Manager, Engineering role requires in-depth experience in building enterprise scaled cloud platforms, enabling cloud services and compute capabilities, and codifying patterns for…
DevOps Engineer
HOOPP (Healthcare of Ontario Pension Plan)
Toronto, ON · CA ON Toronto
$71,000 to $109,000 CAD / year
Full-time
learning and development initiatives, including workshops, Speaker Series events and access to LinkedIn Learning, that support employees’ career growth
Security Automation Engineer-Python / CISSP
BeachHead
Toronto, ON
Contract
Working with one of our top financial clients, this role calls for a Security Automation Engineer-Python / CISSP. You will be integral to developing and maintaining enterprise cryptographic…
Java Technical Lead - Vice President
Citi
Mississauga, ON
Full-time
…technology arm of ICG engaged in the application development and support for various lines of businesses. We are focused on building a cross-functional team of talented individuals,…
Cryptographic Automation Engineer
Global Technical Talent, an Inc. 5000 Company
Toronto, ON
$80 to $90 CAD / hour
Contract
Provide L3 support and production troubleshooting
Systems Engineer
Moneris
Toronto, ON
Full-time
Join the Platform Services and Systems Administration team as a hands-on Systems Engineer focused on defining, modernizing, and automating operating environment standards across Moneris'…
Security Advisor PAM Specialist
Intact FC
Mississauga, ON · Ottawa, ON · Toronto, ON · Montreal, QC
Full-time
Engineer rotation, verification, and reconciliation logic with robust error handling, logging, and supportability

Net2Source (N2S)

Active Directory L3 Support Engineer

Toronto, ON, Canada

Pay: $50 to $55 CAD / hour
Job type: Contract
Apply by: Oct 16, 2026

Apply About employer

Applications open in a new tab.

At a glance

Automatically prepared from the listing. Check the original description for the full requirements.

Jump to the original description

Responsibilities

The engineer will modernize Active Directory services by managing domain controller expansion and implementing robust security controls. They are responsible for remediating privileged-access weaknesses and hardening network configurations to align with Zero Trust principles.

Requirements

Candidates must have hands-on experience administering Active Directory in enterprise environments and proficiency in PowerShell for automation and auditing. Strong knowledge of Microsoft security controls, identity-related remediation, and infrastructure upgrade execution is required.

Experience

5 to 10 years

Education

professional certificate

Working hours

40 hours per week

Work arrangement

Hybrid

Days in the office

Skills

Active Directory
PowerShell
NTLM
LDAP
Zero Trust
CyberArk
Domain Controllers
DNS
Group Policy
Kerberos
SMB Signing
AD CS
ADWS
Windows Server
Disaster Recovery
Identity Security

Visa sponsorship

Not detected in the job text

Keywords

Active Directory
NTLM
PowerShell
LDAP
Zero Trust
CyberArk
Domain Controllers
DNS
Group Policy
Kerberos
SMB Signing
AD CS
ADWS
Windows Server
Disaster Recovery
Identity Security
EPA
Privileged Access Management
Security Hardening
Audit Readiness
Infrastructure
Cybersecurity
Authentication
Replication
Compliance
Change Management
Lateral Movement
Credential Relay
AdminCount
Smartcard

Original job description

Job Description: Active Directory L3 Support Engineer - NTLM, PowerShell, AD, LDAP signing, Zero Trust, CyberArk

Location: Toronto, ON - Hybrid (4 Days WFO)

Term: Contract

This role is responsible for strengthening and modernizing Active Directory services across production and disaster recovery environments. The engineer will manage domain controller expansion and replacement, improve authentication and directory security controls, remediate privileged-access weaknesses, and harden Group Policy and network configurations to reduce attack paths and support resilient enterprise identity services.

Key Responsibilities

Deploy and configure additional domain controllers across primary and disaster recovery sites, including DC01 and DC02, to improve availability, resilience, and site-level recovery readiness.
Replace legacy Windows Server 2016 domain controllers and support platform modernization activities with minimal service disruption.
Implement production and development network segmentation to reduce lateral movement risk and align identity services with Zero Trust principles.
Maintain Active Directory health across replication, authentication, DNS integration, and Group Policy processing.

Security Hardening and Access Control

Enable Extended Protection for Authentication (EPA) and require SSL/TLS for privileged HTTP-based services such as AD CS and ADWS to reduce credential relay and man-in-the-middle exposure.
Enforce SMB signing to help prevent tampering and NTLM relay over SMB sessions.
Disable NTLMv1 and strengthen LDAP protections by enforcing LDAP signing and channel binding / LDAPS for directory communications.
Implement Kerberos armoring, restrict unconstrained delegation, tighten delegation permissions on privileged accounts, and address unknown delegation entries.
Remediate excessive privilege findings, including AdminCount issues, GPO-deployed file exposure, missing protective ACLs, and privileged accounts not enrolled in Protected Users.
Remove insecure legacy access patterns such as Pre-Windows 2000 compatible group usage and administrator logon allowances through Group Policy.
Enforce stronger password and privileged account controls, including a 12-character minimum complexity baseline, password expiration where appropriate, and smartcard password rotation requirements.
Identify and remediate risky account configurations such as PASSWD_NOTREQD, password never expires, admin accounts with email usage, and missing delegation restrictions.

Group Policy, Logging, and Compliance

Harden Group Policy baselines by enforcing event audit logging, PowerShell logging, supported encryption types, remote desktop best-practice settings, and secure administrator sign-in controls.
Review and remediate LDAP signing and channel binding gaps, privileged HTTP service protection gaps, and other domain-level weak configurations identified through assessments.
Document remediation plans, implementation standards, and operational procedures to support audit readiness and ongoing compliance.
Partner with infrastructure, cybersecurity, and application teams to validate compatibility, sequence change windows, and reduce operational risk during security enforcement activities.

Required Technical Skills

Hands-on experience administering Active Directory Domain Services in multi-domain or multi-site enterprise environments.
Strong knowledge of domain controllers, replication, DNS, Group Policy, authentication flows, and disaster recovery design for AD.
Practical experience implementing Microsoft security controls such as EPA, LDAP signing, channel binding, Kerberos hardening, SMB signing, and privileged account protections.
Experience with Active Directory Certificate Services, Active Directory Web Services, Windows Server hardening, and identity-related remediation programs.
Ability to analyze and remediate privilege escalation paths, insecure account settings, and policy-based configuration weaknesses.
Proficiency with PowerShell for audit, remediation, automation, and operational reporting.
Experience planning and executing infrastructure upgrades, domain controller replacement, and controlled production changes.

Preferred Qualifications

Experience supporting regulated or highly controlled enterprise environments with strong audit, change management, and documentation expectations.
Familiarity with Zero Trust architecture, privileged access management, and identity security assessments.
Relevant Microsoft certifications in Windows Server, Active Directory, security, or identity administration are advantageous.

Apply About employer

Report this job