Find work in Canada.

327,567 jobs across our Canadian network. How we count

Jobs in Canada

Save this search

Added 8 hours ago
RTL Semiconductor Engineer
O-HIVE.AI
Windsor, ON
Full-time
Develop efficient SRAM, cache, DMA, buffering, and memory-controller architectures.
Added 13 hours ago
Coordinateur de rotation d'aéronef / TRC (Full Time) - YUL
Menzies Aviation
Dorval, QC
Full-time
Added 4 days ago
Windows Active Directory L3 Support Engineer
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
Full-time
…disaster recovery environments. The engineer will manage domain controller expansion and replacement, improve authentication and directory security controls, remediate privileged-access…
Added 12 days ago
Intern
Worley
Calgary, AB
Full-time
We are currently recruiting for a Junior Document Controller. Our team includes world class experts and dynamic go-getters. This is a full-time position based in Calgary, Alberta.
Added 2 days ago
Technical Accounting Manager
Solink
Remote, Canada
$97,730 to $130,000 CAD / year
Full-time · Remote
Reports To: Urvi Kamleshkumar Shah | Assistant Controller
Added 3 days ago
Financial Controller
Radisson Blu Vancouver Airport Hotel & Marina
Richmond, BC
$110,000 to $120,000 CAD / year
Full-time
The Controller is the senior financial leader for the Radisson Blu Vancouver Airport Hotel & Marina and a member of the Hotel Leadership Team. The role provides accurate and timely…
Added 3 days ago
Controller - Finance Operations & Systems
Western Dispatch
Edmonton, AB
Full-time
Western Dispatch is seeking a hands-on Controller to lead accounting operations, strengthen financial controls and reporting, develop the finance team, and build a scalable finance function…
Added 3 days ago
Controls Specialist (QA/QC) - Building Automation Systems (QAQC002)
Potenco
Toronto, ON · Greater Toronto Area, Canada
Full-time
…system stability, interoperability, or performance and will document findings and recommendations to help establish migration…
Added 3 days ago
Active Directory L3 Support Engineer
Apptoza Inc.
Toronto, ON
Contract
…disaster recovery environments. The engineer will manage domain controller expansion and replacement, improve authentication and directory security controls, remediate privileged-access…
Added 3 days ago
Assistant Controller
EPCM Automation
Oakville, ON
Full-time
The Assistant Controller will oversee the company's financial operations, ensuring accuracy, compliance, and strategic financial planning. This role involves leading the finance team. The…
Added 4 days ago
Active Directory L3 Support Engineer
Net2Source (N2S)
Toronto, ON
$50 to $55 CAD / hour
Contract
…disaster recovery environments. The engineer will manage domain controller expansion and replacement, improve authentication and directory security controls, remediate privileged-access…
Added 4 days ago
Technical Support Engineer
Soroc Technology
Toronto, ON
$50 to $60 CAD / hour
Contract
Experience planning and executing infrastructure upgrades, domain controller replacement, and controlled production changes.
Added 4 days ago
Active Directory Admin
LanceSoft, Inc.
Toronto, ON
$60 to $65 CAD / hour
Contract
…disaster recovery environments. The engineer will manage domain controller expansion and replacement, improve authentication and directory security controls, remediate privileged-access…
Added 4 days ago
Contrôleur financier - Immobilier / Real Estate Controller
Quantum Management Services Ltd.
Montreal, QC
$120,000 to $140,000 USD / year
Full-time
Added 4 days ago
MRP Controller
Insight Global
Longueuil, QC
$27.65 to $36.42 CAD / hour
Contract
Insight Global is seeking an MRP Controller to support the end-to-end management of custom tooling used in the manufacturing, assembly, and maintenance of aircraft engines. This role acts…
Added 4 days ago
Senior Manager, Strategic Finance
Borderless AI
Toronto, ON
Full-time
Borderless AI is looking for an experienced, hands-on Controller to build our accounting and finance function from the ground up as we scale. This is a foundational hire for a Series B/C…
Added 5 days ago
Controller
KIK Consumer Products
Montreal, QC
Full-time
Reporting to the Vice President of Finance, the Controller is responsible for ensuring the integrity of the Company's financial records through effective leadership of the Accounts Payable…
Added 5 days ago
Accounting Manager
Royal Homes Corporation
Wingham, ON
Full-time
…requirements. The Accounting Manager works closely with the Controller and operational managers to support informed business…
Added 5 days ago
Temporary 20 Months - Financial Reporting Analyst
Community Living Sarnia-Lambton
Sarnia, ON
Full-time
Assist the Controller in constructing, maintaining, and monitoring annual operating budgets across all government-funded programs.
Added 5 days ago
Controls Integration Technician- Nebraska/Alberta
Apex Systems
St. Thomas, ON
$33 to $78 USD / hour
Full-time
Validate controller communications and system functionality after deployment.
Added 5 days ago
Controller
MNP Executive Search & Professional Recruitment
Powell River, BC
Full-time
The Controller will hold financial responsibility across the following entities:
Added 6 days ago
Controls Integration Technician- Hamilton, Ontario CANADA
Apex Systems
Hamilton, ON
$35 to $40 USD / hour
Full-time
Validate controller communications and system functionality after deployment.
Added 6 days ago
EEPF Admin - CRPQ and Archives Technician
Cree Nation Government
QC
Review system usage when complaints of system abuse occur (ex. unauthorized searches) and escalate issues to the Controller as they are discovered.
Added 9 days ago
Contrôleur·se // Controller
SSENSE
Montreal, QC
Full-time
Added 6 days ago
Senior Controller
Federal Signal Corporation
Barrie, ON
Full-time
We are seeking a Senior Controller to oversee all aspects of financial accounting and reporting, ensuring compliance with US GAAP and company policies while delivering accurate and timely…

Net2Source (N2S)

Active Directory L3 Support Engineer

Toronto, ON, Canada

Pay: $50 to $55 CAD / hour
Job type: Contract
Apply by: Oct 16, 2026
Posting language: English
Posted: Sep 16, 2026

Apply About employer

Applications open in a new tab.

Original job description

Job Description: Active Directory L3 Support Engineer - NTLM, PowerShell, AD, LDAP signing, Zero Trust, CyberArk

Location: Toronto, ON - Hybrid (4 Days WFO)

Term: Contract

This role is responsible for strengthening and modernizing Active Directory services across production and disaster recovery environments. The engineer will manage domain controller expansion and replacement, improve authentication and directory security controls, remediate privileged-access weaknesses, and harden Group Policy and network configurations to reduce attack paths and support resilient enterprise identity services.

Key Responsibilities

Deploy and configure additional domain controllers across primary and disaster recovery sites, including DC01 and DC02, to improve availability, resilience, and site-level recovery readiness.
Replace legacy Windows Server 2016 domain controllers and support platform modernization activities with minimal service disruption.
Implement production and development network segmentation to reduce lateral movement risk and align identity services with Zero Trust principles.
Maintain Active Directory health across replication, authentication, DNS integration, and Group Policy processing.

Security Hardening and Access Control

Enable Extended Protection for Authentication (EPA) and require SSL/TLS for privileged HTTP-based services such as AD CS and ADWS to reduce credential relay and man-in-the-middle exposure.
Enforce SMB signing to help prevent tampering and NTLM relay over SMB sessions.
Disable NTLMv1 and strengthen LDAP protections by enforcing LDAP signing and channel binding / LDAPS for directory communications.
Implement Kerberos armoring, restrict unconstrained delegation, tighten delegation permissions on privileged accounts, and address unknown delegation entries.
Remediate excessive privilege findings, including AdminCount issues, GPO-deployed file exposure, missing protective ACLs, and privileged accounts not enrolled in Protected Users.
Remove insecure legacy access patterns such as Pre-Windows 2000 compatible group usage and administrator logon allowances through Group Policy.
Enforce stronger password and privileged account controls, including a 12-character minimum complexity baseline, password expiration where appropriate, and smartcard password rotation requirements.
Identify and remediate risky account configurations such as PASSWD_NOTREQD, password never expires, admin accounts with email usage, and missing delegation restrictions.

Group Policy, Logging, and Compliance

Harden Group Policy baselines by enforcing event audit logging, PowerShell logging, supported encryption types, remote desktop best-practice settings, and secure administrator sign-in controls.
Review and remediate LDAP signing and channel binding gaps, privileged HTTP service protection gaps, and other domain-level weak configurations identified through assessments.
Document remediation plans, implementation standards, and operational procedures to support audit readiness and ongoing compliance.
Partner with infrastructure, cybersecurity, and application teams to validate compatibility, sequence change windows, and reduce operational risk during security enforcement activities.

Required Technical Skills

Hands-on experience administering Active Directory Domain Services in multi-domain or multi-site enterprise environments.
Strong knowledge of domain controllers, replication, DNS, Group Policy, authentication flows, and disaster recovery design for AD.
Practical experience implementing Microsoft security controls such as EPA, LDAP signing, channel binding, Kerberos hardening, SMB signing, and privileged account protections.
Experience with Active Directory Certificate Services, Active Directory Web Services, Windows Server hardening, and identity-related remediation programs.
Ability to analyze and remediate privilege escalation paths, insecure account settings, and policy-based configuration weaknesses.
Proficiency with PowerShell for audit, remediation, automation, and operational reporting.
Experience planning and executing infrastructure upgrades, domain controller replacement, and controlled production changes.

Preferred Qualifications

Experience supporting regulated or highly controlled enterprise environments with strong audit, change management, and documentation expectations.
Familiarity with Zero Trust architecture, privileged access management, and identity security assessments.
Relevant Microsoft certifications in Windows Server, Active Directory, security, or identity administration are advantageous.

Apply About employer

More about this job

Responsibilities

The engineer will modernize Active Directory services by managing domain controller expansion and implementing robust security controls. They are responsible for remediating privileged-access weaknesses and hardening network configurations to align with Zero Trust principles.

Requirements

Candidates must have hands-on experience administering Active Directory in enterprise environments and proficiency in PowerShell for automation and auditing. Strong knowledge of Microsoft security controls, identity-related remediation, and infrastructure upgrade execution is required.

Skills

Active Directory
PowerShell
NTLM
LDAP
Zero Trust
CyberArk
Domain Controllers
DNS
Group Policy
Kerberos
SMB Signing
AD CS
ADWS
Windows Server
Disaster Recovery
Identity Security

Visa sponsorship

Not detected in the job text

Keywords

Active Directory
NTLM
PowerShell
LDAP
Zero Trust
CyberArk
Domain Controllers
DNS
Group Policy
Kerberos
SMB Signing
AD CS
ADWS
Windows Server
Disaster Recovery
Identity Security
EPA
Privileged Access Management
Security Hardening
Audit Readiness
Infrastructure
Cybersecurity
Authentication
Replication
Compliance
Change Management
Lateral Movement
Credential Relay
AdminCount
Smartcard

Report this job