Jobs in Canada

12 jobs

Email me new jobs Save this search

Added 8 hours ago
Project Technician – Tier 3 Network & Infrastructure Specialist
MSP OPERATIONAL CORP
Guelph, ON · London, ON
$90,000 to $100,000 CAD / year
…environments. This role is ideal for a senior technician or engineer who is equally comfortable configuring firewalls and switches and deploying Windows server infrastructure, hypervisors,…
Added 11 days ago
Windows Active Directory L3 Support Engineer
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
Full-time
Windows Active Directory L3 Support Engineer – NTLM, PowerShell, AD, LDAP Signing, Zero Trust, CyberArk
Added 10 days ago
Technical Support Engineer
Soroc Technology
Toronto, ON
$50 to $60 CAD / hour
Contract
Soroc is seeking a Active Directory Support Engineer on contract for one of our banking clients in Toronto.
Added 12 days ago
Service Desk Support Analyst (L2)
MNP
Burlington, ON · Markham, ON · Toronto, ON
Full-time
Intermediate knowledge of Active Directory / Entra ID, MFA, and RBAC
Added 12 days ago
MONTREAL [HYBRIDE] - Messaging L2 Support Engineer
QUANTEAM (RAINBOW PARTNERS Group)
Montreal, QC · Greater Montreal Metropolitan Area
Full-time
We are looking for a Messaging L2 Support Engineer for one of our clients based in Montreal.
Added 22 days ago
Active Directory Specialist
Pacer Group
Toronto, ON
$60 to $62 CAD / hour
Contract
Job Title: Active Directory L3 Support Engineer
Added 22 days ago
Active Directory L3 Support Engineer
Pacer Group
Toronto, ON
$55 to $60 CAD / hour
Contract
Job Title: Active Directory L3 Support Engineer
Added 1 month ago
Windows Active Directory L3 Support Engineer
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
Full-time
Windows Active Directory L3 Support Engineer – NTLM, PowerShell, AD, LDAP Signing, Zero Trust, CyberArk
Added 1 month ago
Active Directory L3 Support Engineer
Tata Consultancy Services
Toronto, ON
$90,000 to $110,000 CAD / year
Full-time
Provide support and guidance to IAM and other teams on Active Directory-related issues
Added 1 month ago
Senior System Administrator
Resource Label Group
Toronto, ON
Full-time
Windows Server and Active Directory/Entra ID administration at an enterprise level.
Added 4 months ago
Service Desk Support Analyst (L2)
MNP
Burlington, Ontario · Toronto, Ontario · Ontario
Full-time
Intermediate knowledge of Active Directory / Entra ID, MFA, and RBAC
Added 4 months ago
Service Desk Support Analyst (L3)
MNP
Burlington, Ontario · Toronto, Ontario · Ontario
Full-time
Advanced knowledge of Active Directory / Entra ID, modern authentication (MFA), and RBAC

No more jobs.

Soroc Technology

Technical Support Engineer

Toronto, ON, Canada

Pay: $50 to $60 CAD / hour
Job type: Contract
Apply by: Oct 16, 2026
Posting language: English
Posted: Sep 16, 2026

Apply About employer

Applications open in a new tab.

Original job description

Soroc is seeking a Active Directory Support Engineer on contract for one of our banking clients in Toronto.

Active Directory L3 Support Engineer - NTLM, PowerShell, AD, LDAP signing, Zero Trust, CyberArk

Toronto, ON - Hybrid (4 Days WFO)

6-12 months contract

Contract Rate: $50/hr on T4 OR $60/hr on Incorp

Required Technical Skills:

Hands-on experience administering Active Directory Domain Services in multi-domain or multi-site enterprise environments.
Strong knowledge of domain controllers, replication, DNS, Group Policy, authentication flows, and disaster recovery design for AD.
Practical experience implementing Microsoft security controls such as EPA, LDAP signing, channel binding, Kerberos hardening, SMB signing, and privileged account protections.
Experience with Active Directory Certificate Services, Active Directory Web Services, Windows Server hardening, and identity-related remediation programs.
Ability to analyze and remediate privilege escalation paths, insecure account settings, and policy-based configuration weaknesses.
Proficiency with PowerShell for audit, remediation, automation, and operational reporting.
Experience planning and executing infrastructure upgrades, domain controller replacement, and controlled production changes.

Key Responsibilities

Deploy and configure additional domain controllers across primary and disaster recovery sites, including DC01 and DC02, to improve availability, resilience, and site-level recovery readiness.
Replace legacy Windows Server 2016 domain controllers and support platform modernization activities with minimal service disruption.
Implement production and development network segmentation to reduce lateral movement risk and align identity services with Zero Trust principles.
Maintain Active Directory health across replication, authentication, DNS integration, and Group Policy processing.
Security Hardening and Access Control
Enable Extended Protection for Authentication (EPA) and require SSL/TLS for privileged HTTP-based services such as AD CS and ADWS to reduce credential relay and man-in-the-middle exposure.
Enforce SMB signing to help prevent tampering and NTLM relay over SMB sessions.
Disable NTLMv1 and strengthen LDAP protections by enforcing LDAP signing and channel binding / LDAPS for directory communications.
Implement Kerberos armoring, restrict unconstrained delegation, tighten delegation permissions on privileged accounts, and address unknown delegation entries.
Remediate excessive privilege findings, including AdminCount issues, GPO-deployed file exposure, missing protective ACLs, and privileged accounts not enrolled in Protected Users.
Remove insecure legacy access patterns such as Pre-Windows 2000 compatible group usage and administrator logon allowances through Group Policy.
Enforce stronger password and privileged account controls, including a 12-character minimum complexity baseline, password expiration where appropriate, and smartcard password rotation requirements.
Identify and remediate risky account configurations such as PASSWD_NOTREQD, password never expires, admin accounts with email usage, and missing delegation restrictions.
Group Policy, Logging, and Compliance
Harden Group Policy baselines by enforcing event audit logging, PowerShell logging, supported encryption types, remote desktop best-practice settings, and secure administrator sign-in controls.
Review and remediate LDAP signing and channel binding gaps, privileged HTTP service protection gaps, and other domain-level weak configurations identified through assessments.
Document remediation plans, implementation standards, and operational procedures to support audit readiness and ongoing compliance.
Partner with infrastructure, cybersecurity, and application teams to validate compatibility, sequence change windows, and reduce operational risk during security enforcement activities.

Apply About employer

More about this job

Responsibilities

The engineer will deploy and configure domain controllers to improve infrastructure resilience and modernize legacy Windows Server environments. They are also responsible for implementing security hardening measures, including Zero Trust principles and privileged access controls.

Requirements

Candidates must have hands-on experience administering Active Directory in multi-domain enterprise environments. Proficiency in PowerShell, security protocols like Kerberos and LDAP signing, and infrastructure upgrade execution is required.

Skills

Active Directory
PowerShell
NTLM
LDAP
Zero Trust
CyberArk
DNS
Group Policy
Kerberos
Windows Server
Active Directory Certificate Services
Disaster Recovery
Security Hardening
Identity Management
SMB Signing

Visa sponsorship

Not detected in the job text

Keywords

Active Directory
PowerShell
NTLM
LDAP
Zero Trust
CyberArk
DNS
Group Policy
Kerberos
Windows Server
Active Directory Certificate Services
Disaster Recovery
Security Hardening
Identity Management
SMB Signing
EPA
Channel Binding
Privileged Access Management
Infrastructure Upgrades
Network Segmentation
Compliance
Audit Logging
Automation
System Administration
Cybersecurity

Report this job