Find work in Canada.

328,021 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Save this search

Added 3 months ago
IT Support Engineer – Desktop & CAD Systems
Techedin
Montreal, Quebec
Full-time
Job Title: IT Support Engineer – Desktop & CAD Systems
Added 23 days ago
Desktop Support Engineer
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
Full-time
We are seeking experienced Desktop Support Engineers to provide L2 End User Computing (EUC) and desktop support across enterprise environments. The ideal candidates will have strong…
Added 26 days ago
Desktop Support Engineer
Hays
Montreal, QC
Contract
We are seeking a skilled Desktop Support Engineer to provide onsite end-user computing support in Montreal. The ideal candidate will have hands-on experience with desktop imaging, device…
Added 2 days ago
Desktop Support Engineer
Leidos
Calgary, AB
Full-time
Leidos is seeking a Desktop Support Engineer based in Calgary, Canada. This role provides 2nd line desktop, hardware, software, network, and office infrastructure support for employees. The…
Added 4 days ago
EUC Desktop Support Engineer
Tata Consultancy Services
Toronto, ON
Full-time
Proficient in using IT support, system support, hardware troubleshooting, desktop support, Windows installation, printer troubleshooting, network support, hardware support, network printer…
Added 26 days ago
Desktop Support Engineer
Tata Consultancy Services
Montreal, QC
Full-time
Experience in Remote Support, Mobility, Antivirus, Engineering Services
Added 1 day ago
Desktop Senior Engineer / Montreal, QC / Hybrid / FTE
AceStack
Montreal, QC
$120,000 to $140,000 CAD / year
Full-time
We are looking for a Senior Desktop Engineer with strong experience in End User Computing (EUC), desktop support, endpoint management, and virtual desktop technologies. The ideal candidate…
Added 4 days ago
Desktop Engineer
Intellibee Inc
Tyner, SK
Full-time
…the customer. Provides updates on work progress to Customer Support Specialists and the Service Desk using call tracking system. Has significant technical knowledge and serves as a resource…
Added 1 month ago
Desktop Engineer
George Brown Polytechnic
Toronto, ON
Ecosystem supporting Windows, Apple (MacOS, IOS), and Android-based user-facing
Added 3 days ago
Technical Support Engineer
Soroc Technology
Toronto, ON
$50 to $60 CAD / hour
Contract
Soroc is seeking a Active Directory Support Engineer on contract for one of our banking clients in Toronto.
Added 3 days ago
Active Directory L3 Support Engineer
Net2Source (N2S)
Toronto, ON
$50 to $55 CAD / hour
Contract
Job Description: Active Directory L3 Support Engineer - NTLM, PowerShell, AD, LDAP signing, Zero Trust, CyberArk
Added 1 month ago
Senior Desktop Engineer
GEI Consultants, Inc.
Vancouver, BC
Full-time
The Senior Desktop Engineer will provide Tier 1, front-line technical support, to local and remote employees. This includes assisting with desktops, laptops, mobile devices, peripherals,…
Added 1 month ago
Senior Desktop Engineer
GEI Consultants, Inc.
Abbotsford, BC
Full-time
The Senior Desktop Engineer will provide Tier 1, front-line technical support, to local and remote employees. This includes assisting with desktops, laptops, mobile devices, peripherals,…
Added 1 month ago
Senior Desktop Engineer
GEI Consultants, Inc.
Guelph, ON
Full-time
The Senior Desktop Engineer will provide Tier 1, front-line technical support, to local and remote employees. This includes assisting with desktops, laptops, mobile devices, peripherals,…
Added 4 months ago
Application Support Engineer - Canada
Assetsoft
ON · Markham Central, Ontario
Full-time
The Application Support Engineer (ASE) is a hybrid techno-functional role responsible for providing endto-end support for business-critical applications, proactively resolving issues, and…
Added 4 months ago
Application Support Engineer - Canada
Assetsoft
The Archipelago Township, Ontario · Markham Central, Ontario
Full-time
The Application Support Engineer (ASE) is a hybrid techno-functional role responsible for providing endto-end support for business-critical applications, proactively resolving issues, and…
Added 2 months ago
Sr. IT Support Engineer
Atellos Solutions
Engineer, BC
Full-time
As a Senior Network Operations Center Engineer, you will play a pivotal role in leading the design and maintenance of our intricate system environment, catering to both internal operations…
Added 1 month ago
Associate Customer Support Engineer
Flashpoint
Remote, Canada
Full-time · Remote
Are you an experienced Associate Customer Support Engineer who thrives on solving technical problems and turning customers into loyal product champions? Flashpoint is looking for an…
Added 11 days ago
Soutien pour les TI - IT Support Engineer
Brenntag
Montreal, QC · Canada / Montreal
Full-time
Expérience avec les outils d’aide à distance (p. ex., TeamViewer, AnyDesk, Remote Desktop)
Added 3 months ago
Technical Support Engineer
PDF Solutions
Vancouver, BC
Full-time
As a Technical Support Engineer, you will support a diverse set of Java applications, databases, and messaging systems that are on-prem and cloud-based. You will work in a dynamic…
Added 11 days ago
Technical Support Engineer
EP | Central Casting
Burnaby, BC · Toronto, ON
Full-time
The Technical Support Engineer provides excellent customer service through desk-side support to all EP internal employees. Support includes computer imaging, deployment and moves,…
Added 4 days ago
Windows Active Directory L3 Support Engineer
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
Full-time
Windows Active Directory L3 Support Engineer – NTLM, PowerShell, AD, LDAP Signing, Zero Trust, CyberArk
Added 24 days ago
Windows Active Directory L3 Support Engineer
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
Full-time
Windows Active Directory L3 Support Engineer – NTLM, PowerShell, AD, LDAP Signing, Zero Trust, CyberArk
Added 2 days ago
Active Directory L3 Support Engineer
Apptoza Inc.
Toronto, ON
Contract
…services across production and disaster recovery environments. The engineer will manage domain controller expansion and replacement, improve authentication and directory security controls,…
Added 4 months ago
Senior Security Engineer, Docker Desktop
Docker
Remote, Canada
Full-time · Remote
As a Senior Security Engineer embedded in the Desktop engineering team, you will own the security posture of a complex, cross-platform product that sits at the intersection of identity, OCI…

Net2Source (N2S)

Active Directory L3 Support Engineer

Toronto, ON, Canada

Pay: $50 to $55 CAD / hour
Job type: Contract
Apply by: Oct 16, 2026
Posting language: English
Posted: Sep 16, 2026

Apply About employer

Applications open in a new tab.

Original job description

Job Description: Active Directory L3 Support Engineer - NTLM, PowerShell, AD, LDAP signing, Zero Trust, CyberArk

Location: Toronto, ON - Hybrid (4 Days WFO)

Term: Contract

This role is responsible for strengthening and modernizing Active Directory services across production and disaster recovery environments. The engineer will manage domain controller expansion and replacement, improve authentication and directory security controls, remediate privileged-access weaknesses, and harden Group Policy and network configurations to reduce attack paths and support resilient enterprise identity services.

Key Responsibilities

Deploy and configure additional domain controllers across primary and disaster recovery sites, including DC01 and DC02, to improve availability, resilience, and site-level recovery readiness.
Replace legacy Windows Server 2016 domain controllers and support platform modernization activities with minimal service disruption.
Implement production and development network segmentation to reduce lateral movement risk and align identity services with Zero Trust principles.
Maintain Active Directory health across replication, authentication, DNS integration, and Group Policy processing.

Security Hardening and Access Control

Enable Extended Protection for Authentication (EPA) and require SSL/TLS for privileged HTTP-based services such as AD CS and ADWS to reduce credential relay and man-in-the-middle exposure.
Enforce SMB signing to help prevent tampering and NTLM relay over SMB sessions.
Disable NTLMv1 and strengthen LDAP protections by enforcing LDAP signing and channel binding / LDAPS for directory communications.
Implement Kerberos armoring, restrict unconstrained delegation, tighten delegation permissions on privileged accounts, and address unknown delegation entries.
Remediate excessive privilege findings, including AdminCount issues, GPO-deployed file exposure, missing protective ACLs, and privileged accounts not enrolled in Protected Users.
Remove insecure legacy access patterns such as Pre-Windows 2000 compatible group usage and administrator logon allowances through Group Policy.
Enforce stronger password and privileged account controls, including a 12-character minimum complexity baseline, password expiration where appropriate, and smartcard password rotation requirements.
Identify and remediate risky account configurations such as PASSWD_NOTREQD, password never expires, admin accounts with email usage, and missing delegation restrictions.

Group Policy, Logging, and Compliance

Harden Group Policy baselines by enforcing event audit logging, PowerShell logging, supported encryption types, remote desktop best-practice settings, and secure administrator sign-in controls.
Review and remediate LDAP signing and channel binding gaps, privileged HTTP service protection gaps, and other domain-level weak configurations identified through assessments.
Document remediation plans, implementation standards, and operational procedures to support audit readiness and ongoing compliance.
Partner with infrastructure, cybersecurity, and application teams to validate compatibility, sequence change windows, and reduce operational risk during security enforcement activities.

Required Technical Skills

Hands-on experience administering Active Directory Domain Services in multi-domain or multi-site enterprise environments.
Strong knowledge of domain controllers, replication, DNS, Group Policy, authentication flows, and disaster recovery design for AD.
Practical experience implementing Microsoft security controls such as EPA, LDAP signing, channel binding, Kerberos hardening, SMB signing, and privileged account protections.
Experience with Active Directory Certificate Services, Active Directory Web Services, Windows Server hardening, and identity-related remediation programs.
Ability to analyze and remediate privilege escalation paths, insecure account settings, and policy-based configuration weaknesses.
Proficiency with PowerShell for audit, remediation, automation, and operational reporting.
Experience planning and executing infrastructure upgrades, domain controller replacement, and controlled production changes.

Preferred Qualifications

Experience supporting regulated or highly controlled enterprise environments with strong audit, change management, and documentation expectations.
Familiarity with Zero Trust architecture, privileged access management, and identity security assessments.
Relevant Microsoft certifications in Windows Server, Active Directory, security, or identity administration are advantageous.

Apply About employer

More about this job

Responsibilities

The engineer will modernize Active Directory services by managing domain controller expansion and implementing robust security controls. They are responsible for remediating privileged-access weaknesses and hardening network configurations to align with Zero Trust principles.

Requirements

Candidates must have hands-on experience administering Active Directory in enterprise environments and proficiency in PowerShell for automation and auditing. Strong knowledge of Microsoft security controls, identity-related remediation, and infrastructure upgrade execution is required.

Skills

Active Directory
PowerShell
NTLM
LDAP
Zero Trust
CyberArk
Domain Controllers
DNS
Group Policy
Kerberos
SMB Signing
AD CS
ADWS
Windows Server
Disaster Recovery
Identity Security

Visa sponsorship

Not detected in the job text

Keywords

Active Directory
NTLM
PowerShell
LDAP
Zero Trust
CyberArk
Domain Controllers
DNS
Group Policy
Kerberos
SMB Signing
AD CS
ADWS
Windows Server
Disaster Recovery
Identity Security
EPA
Privileged Access Management
Security Hardening
Audit Readiness
Infrastructure
Cybersecurity
Authentication
Replication
Compliance
Change Management
Lateral Movement
Credential Relay
AdminCount
Smartcard

Report this job