Find work in Canada.

329,660 jobs across our Canadian network. How we count

Jobs in Canada

Email me new jobs Save this search

Added 9 days ago
Software Engineer II, Backend
Brex
Vancouver, BC
…banking with intuitive spend management, bill pay, and travel software, Brex enables founders and finance teams to accelerate operations, gain real-time visibility, and control spend…
Added 10 days ago
Manager, Marketing Creative
AfterShip
Vancouver, BC · Toronto, ON
Added 9 days ago
Principal Design Engineer
League Inc.
Canada
Added 10 days ago
Staff Data Engineer
Jobber
Remote, Canada
Full-time · Remote
Then Jobber might be the place for you! We’re looking for a new Staff Data Engineer to join our Data Platform Team.
Added 9 days ago
Group Manager – Flow Monitoring
AECOM
Mississauga, ON · Markham, Ontario
$130,000 to $160,000 CAD / year
Full-time
Added 1 month ago
Engineering Manager - API
Craver
Canada
Full-time
Added 10 days ago
Senior Data Engineer
Minga
Kelowna, BC
Full-time
Added 2 months ago
Junior Data Engineer - Blenddata
Dimension Study Association
Engineer, BC
Full-time
Added 1 month ago
PRODUCT ENGINEER ASSISTANT
Hoi P'loy
Engineer, BC
Full-time
PRODUCT DEVELOPMENT ENGINEER (FULL TIME, On-Site, in CAPE TOWN)
Added 2 months ago
QA Engineer
SPARK
Engineer, BC
Full-time
Added 9 days ago
Intern Technology & Data Winter 2027
CPP Investments | Investissements RPC
Toronto, ON
Full-time
Added 9 days ago
AI Full Stack Developer
Synechron
Halifax, NS
$120,000 to $125,000 CAD / year
Full-time
…Intelligence, Consulting, Digital, Cloud & DevOps, Data, and Software Engineering, servicing an array of noteworthy financial services and technology firms. Through research and development…
Added 10 days ago
Practice Lead, Structural Engineering
PRI Consultants
Surrey, BC
Full-time
Added 10 days ago
Senior / Principal Structural Engineer (Transit Structures/Facilities/Buildings)
Parsons Corporation
London, ON · Markham, ON · Oakville, ON · Toronto, ON
Full-time
Added 9 days ago
Senior Structural Engineer - Global Energy Services
Rimkus
Vancouver, BC
Full-time
We are seeking a Senior Structural Engineer with extensive experience in design, construction and failure analysis. This senior-level
Added 9 days ago
Senior Structural Engineer - Global Energy Services
Rimkus
Calgary, AB
Full-time
We are seeking a Senior Structural Engineer with extensive experience in design, construction and failure analysis. This senior-level
Added 9 days ago
Research Software Engineer
ProteinQure Inc
Toronto, ON
$120,000 to $150,000 CAD / year
Added 29 days ago
Process Engineer - Students Seeking Opportunities - Sarnia
Imperial Oil
Sarnia, ON
Full-time
Added 10 days ago
Technical Support Engineer
Soroc Technology
Toronto, ON
$50 to $60 CAD / hour
Contract
Soroc is seeking a Active Directory Support Engineer on contract for one of our banking clients in Toronto.
Added 10 days ago
2027 Investor Services, PEY Software Engineer (12 months)
Royal Bank of Canada
Toronto, ON
Full-time
Join Royal Bank of Canada as a Software Engineer Intern within the Investor Services - Data & Digital - Business Intelligence group. This internship offers hands-on experience developing…
Added 10 days ago
ML Engineering Intern - Infrastructure (Spring 2027)
Peripheral
Toronto, ON
Internship
Added 10 days ago
Environmental Engineer 6
CDM Smith
Toronto, ON
Added 10 days ago
Industrial Equipment Drafter
Allredi
Leduc, AB
Full-time
Added 10 days ago
Senior Software Engineer, Computation
Aurora Solar
Remote, Canada
$126,200 to $187,900 CAD / year
Full-time · Remote
Aurora is on a mission to create a future of solar for all. Our award-winning software puts the power of data and technology into the hands of every solar professional to make solar…
Added 9 days ago
Sr Stress Engineer
Insight Global
Mirabel, QC
$113,000 to $163,000 CAD / year
Full-time

Closed listing

Net2Source (N2S)

Active Directory L3 Support Engineer

Toronto, ON, Canada

Pay: $50 to $55 CAD / hour
Job type: Contract
Closing date: Oct 16, 2026
Posting language: English
Posted: Sep 16, 2026

This opening has closed.

The original listing is kept below for reference.

Find open jobs More jobs with this employer

About employer

Similar jobs hiring now

Added 10 days ago
Windows Active Directory L3 Support Engineer
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision! · Toronto, ON, Canada
Added 10 days ago
Technical Support Engineer
Soroc Technology · Toronto, ON, Canada
$50 to $60 CAD / hour
Added 11 days ago
Service Desk Support Analyst (L2)
MNP · Markham, ON, Canada · Toronto, ON, Canada
Added 21 days ago
Active Directory Specialist
Pacer Group · Toronto, ON, Canada
$60 to $62 CAD / hour

Search current openings

Original job description

Archived listing. The details below describe a past opening.

Job Description: Active Directory L3 Support Engineer - NTLM, PowerShell, AD, LDAP signing, Zero Trust, CyberArk

Location: Toronto, ON - Hybrid (4 Days WFO)

Term: Contract

This role is responsible for strengthening and modernizing Active Directory services across production and disaster recovery environments. The engineer will manage domain controller expansion and replacement, improve authentication and directory security controls, remediate privileged-access weaknesses, and harden Group Policy and network configurations to reduce attack paths and support resilient enterprise identity services.

Key Responsibilities

Deploy and configure additional domain controllers across primary and disaster recovery sites, including DC01 and DC02, to improve availability, resilience, and site-level recovery readiness.
Replace legacy Windows Server 2016 domain controllers and support platform modernization activities with minimal service disruption.
Implement production and development network segmentation to reduce lateral movement risk and align identity services with Zero Trust principles.
Maintain Active Directory health across replication, authentication, DNS integration, and Group Policy processing.

Security Hardening and Access Control

Enable Extended Protection for Authentication (EPA) and require SSL/TLS for privileged HTTP-based services such as AD CS and ADWS to reduce credential relay and man-in-the-middle exposure.
Enforce SMB signing to help prevent tampering and NTLM relay over SMB sessions.
Disable NTLMv1 and strengthen LDAP protections by enforcing LDAP signing and channel binding / LDAPS for directory communications.
Implement Kerberos armoring, restrict unconstrained delegation, tighten delegation permissions on privileged accounts, and address unknown delegation entries.
Remediate excessive privilege findings, including AdminCount issues, GPO-deployed file exposure, missing protective ACLs, and privileged accounts not enrolled in Protected Users.
Remove insecure legacy access patterns such as Pre-Windows 2000 compatible group usage and administrator logon allowances through Group Policy.
Enforce stronger password and privileged account controls, including a 12-character minimum complexity baseline, password expiration where appropriate, and smartcard password rotation requirements.
Identify and remediate risky account configurations such as PASSWD_NOTREQD, password never expires, admin accounts with email usage, and missing delegation restrictions.

Group Policy, Logging, and Compliance

Harden Group Policy baselines by enforcing event audit logging, PowerShell logging, supported encryption types, remote desktop best-practice settings, and secure administrator sign-in controls.
Review and remediate LDAP signing and channel binding gaps, privileged HTTP service protection gaps, and other domain-level weak configurations identified through assessments.
Document remediation plans, implementation standards, and operational procedures to support audit readiness and ongoing compliance.
Partner with infrastructure, cybersecurity, and application teams to validate compatibility, sequence change windows, and reduce operational risk during security enforcement activities.

Required Technical Skills

Hands-on experience administering Active Directory Domain Services in multi-domain or multi-site enterprise environments.
Strong knowledge of domain controllers, replication, DNS, Group Policy, authentication flows, and disaster recovery design for AD.
Practical experience implementing Microsoft security controls such as EPA, LDAP signing, channel binding, Kerberos hardening, SMB signing, and privileged account protections.
Experience with Active Directory Certificate Services, Active Directory Web Services, Windows Server hardening, and identity-related remediation programs.
Ability to analyze and remediate privilege escalation paths, insecure account settings, and policy-based configuration weaknesses.
Proficiency with PowerShell for audit, remediation, automation, and operational reporting.
Experience planning and executing infrastructure upgrades, domain controller replacement, and controlled production changes.

Preferred Qualifications

Experience supporting regulated or highly controlled enterprise environments with strong audit, change management, and documentation expectations.
Familiarity with Zero Trust architecture, privileged access management, and identity security assessments.
Relevant Microsoft certifications in Windows Server, Active Directory, security, or identity administration are advantageous.

About employer

More about this job

Responsibilities

The engineer will modernize Active Directory services by managing domain controller expansion and implementing robust security controls. They are responsible for remediating privileged-access weaknesses and hardening network configurations to align with Zero Trust principles.

Requirements

Candidates must have hands-on experience administering Active Directory in enterprise environments and proficiency in PowerShell for automation and auditing. Strong knowledge of Microsoft security controls, identity-related remediation, and infrastructure upgrade execution is required.

Skills

Active Directory
PowerShell
NTLM
LDAP
Zero Trust
CyberArk
Domain Controllers
DNS
Group Policy
Kerberos
SMB Signing
AD CS
ADWS
Windows Server
Disaster Recovery
Identity Security

Visa sponsorship

Not detected in the job text

Keywords

Active Directory
NTLM
PowerShell
LDAP
Zero Trust
CyberArk
Domain Controllers
DNS
Group Policy
Kerberos
SMB Signing
AD CS
ADWS
Windows Server
Disaster Recovery
Identity Security
EPA
Privileged Access Management
Security Hardening
Audit Readiness
Infrastructure
Cybersecurity
Authentication
Replication
Compliance
Change Management
Lateral Movement
Credential Relay
AdminCount
Smartcard

Report this job