Jobs in Canada

Save this search

Added 3 months ago
Civil Engineer
Innergex
Vancouver, British Columbia
Full-time
Support tender processes, including development, analysis and recommendations (preliminary design, geotechnical desktop studies, hydrology, road and pad design, etc.)
Added 3 months ago
Flight Control Engineer
Sapsol Technologies Inc
Remote, Canada
Contract · Remote
Support CLaws, autopilot, and navigation design development for R&D projects
Added 3 months ago
Flight Control Engineer
Sapsol Technologies Inc
Remote, Canada
Contract · Remote
Support CLaws, autopilot, and navigation design development for R&D projects
Added 4 months ago
Senior Modern Workplace Engineer
EQ Bank | Canada's Challenger Bank
Toronto, Ontario
Full-time
The Senior Modern Workplace Engineer plays a key role in the design, delivery, and ongoing support of cloud-based productivity and collaboration services across the organisation. The role…
Added 4 months ago
Senior Supply Chain Security Engineer (East Coast Preferred)
Docker
Remote, Canada
Full-time · Remote
…applications across our suite of products including Docker Desktop, Docker Hub, and Docker…
Added 4 months ago
Staff Software Engineer
OpenMined
Remote, Canada
Full-time · Remote
We're looking for a Senior / Staff Software Engineer to join OpenMined, a nonprofit on a mission to build the public network for the world's non-public data - unlocking 1,000,000x more…
Added 4 months ago
Senior Security Engineer, Docker Desktop
Docker
Remote, Canada
Full-time · Remote
As a Senior Security Engineer embedded in the Desktop engineering team, you will own the security posture of a complex, cross-platform product that sits at the intersection of identity, OCI…
Added 5 months ago
Senior Mining Practitioner
Stantec
Mississauga, Ontario
Full-time
Conduct desktop studies in support of regulatory requirements
Added 3 months ago
Automation and Service Desk Specialist
Ontario Medical Association
Toronto, ON
Full-time
…automation development, and expanded responsibility for operational support across network, identity, and cloud…
Added 2 months ago
Sr. Software Engineer, Virtual Desktop
Omnissa
Vancouver, British Columbia · Canada-British Columbia
$185,000 to $211,400 CAD / year
Full-time
5+ years' experience with Virtual Desktop / App Remoting software

No more jobs.

Soroc Technology

Technical Support Engineer

Toronto, ON, Canada

Pay: $50 to $60 CAD / hour
Job type: Contract
Apply by: Oct 16, 2026
Posting language: English
Posted: Sep 16, 2026

Apply About employer

Applications open in a new tab.

Original job description

Soroc is seeking a Active Directory Support Engineer on contract for one of our banking clients in Toronto.

Active Directory L3 Support Engineer - NTLM, PowerShell, AD, LDAP signing, Zero Trust, CyberArk

Toronto, ON - Hybrid (4 Days WFO)

6-12 months contract

Contract Rate: $50/hr on T4 OR $60/hr on Incorp

Required Technical Skills:

Hands-on experience administering Active Directory Domain Services in multi-domain or multi-site enterprise environments.
Strong knowledge of domain controllers, replication, DNS, Group Policy, authentication flows, and disaster recovery design for AD.
Practical experience implementing Microsoft security controls such as EPA, LDAP signing, channel binding, Kerberos hardening, SMB signing, and privileged account protections.
Experience with Active Directory Certificate Services, Active Directory Web Services, Windows Server hardening, and identity-related remediation programs.
Ability to analyze and remediate privilege escalation paths, insecure account settings, and policy-based configuration weaknesses.
Proficiency with PowerShell for audit, remediation, automation, and operational reporting.
Experience planning and executing infrastructure upgrades, domain controller replacement, and controlled production changes.

Key Responsibilities

Deploy and configure additional domain controllers across primary and disaster recovery sites, including DC01 and DC02, to improve availability, resilience, and site-level recovery readiness.
Replace legacy Windows Server 2016 domain controllers and support platform modernization activities with minimal service disruption.
Implement production and development network segmentation to reduce lateral movement risk and align identity services with Zero Trust principles.
Maintain Active Directory health across replication, authentication, DNS integration, and Group Policy processing.
Security Hardening and Access Control
Enable Extended Protection for Authentication (EPA) and require SSL/TLS for privileged HTTP-based services such as AD CS and ADWS to reduce credential relay and man-in-the-middle exposure.
Enforce SMB signing to help prevent tampering and NTLM relay over SMB sessions.
Disable NTLMv1 and strengthen LDAP protections by enforcing LDAP signing and channel binding / LDAPS for directory communications.
Implement Kerberos armoring, restrict unconstrained delegation, tighten delegation permissions on privileged accounts, and address unknown delegation entries.
Remediate excessive privilege findings, including AdminCount issues, GPO-deployed file exposure, missing protective ACLs, and privileged accounts not enrolled in Protected Users.
Remove insecure legacy access patterns such as Pre-Windows 2000 compatible group usage and administrator logon allowances through Group Policy.
Enforce stronger password and privileged account controls, including a 12-character minimum complexity baseline, password expiration where appropriate, and smartcard password rotation requirements.
Identify and remediate risky account configurations such as PASSWD_NOTREQD, password never expires, admin accounts with email usage, and missing delegation restrictions.
Group Policy, Logging, and Compliance
Harden Group Policy baselines by enforcing event audit logging, PowerShell logging, supported encryption types, remote desktop best-practice settings, and secure administrator sign-in controls.
Review and remediate LDAP signing and channel binding gaps, privileged HTTP service protection gaps, and other domain-level weak configurations identified through assessments.
Document remediation plans, implementation standards, and operational procedures to support audit readiness and ongoing compliance.
Partner with infrastructure, cybersecurity, and application teams to validate compatibility, sequence change windows, and reduce operational risk during security enforcement activities.

Apply About employer

More about this job

Responsibilities

The engineer will deploy and configure domain controllers to improve infrastructure resilience and modernize legacy Windows Server environments. They are also responsible for implementing security hardening measures, including Zero Trust principles and privileged access controls.

Requirements

Candidates must have hands-on experience administering Active Directory in multi-domain enterprise environments. Proficiency in PowerShell, security protocols like Kerberos and LDAP signing, and infrastructure upgrade execution is required.

Skills

Active Directory
PowerShell
NTLM
LDAP
Zero Trust
CyberArk
DNS
Group Policy
Kerberos
Windows Server
Active Directory Certificate Services
Disaster Recovery
Security Hardening
Identity Management
SMB Signing

Visa sponsorship

Not detected in the job text

Keywords

Active Directory
PowerShell
NTLM
LDAP
Zero Trust
CyberArk
DNS
Group Policy
Kerberos
Windows Server
Active Directory Certificate Services
Disaster Recovery
Security Hardening
Identity Management
SMB Signing
EPA
Channel Binding
Privileged Access Management
Infrastructure Upgrades
Network Segmentation
Compliance
Audit Logging
Automation
System Administration
Cybersecurity

Report this job