Advanced Cyber Sec Arch/Engr
Job Details:
Active Directory Domain Build, Domain controller Promotion & Demotion
Expertise in AD Replication, DNS, GPOs, FSMO Roles, DC Certificate and Troubleshooting
Responsible to implement Backup Strategies for Domain Controllers (BMR/RMAD/Azure Backups)
Configure MDI/MDE in the Domain Controllers
Perform AD Health checks, upgrades, Patching, Security Hardening
AD Migrations (on-prem to on-prem / on-prem to Entra ID)
Strong Experience with Entra ID, AAD Connect and Hybrid Identity Setups
Strong Experience with Entra ID – Users, Groups, External Identities, SSPR, PIM, Identity Protection
Configure AD/ADSecurity/Azure Assessments for Multiple Domain/Tenants and remediate the recommendations
Expertise in designing and Implementing Conditional Access Policies and Enforcing MFA with proper testing in Production environments
Good knowledge in Powershell Scripting and KQL Queries for report generation, automation and administration
Work with Vulnerability management and Compliance teams to mitigate risks
Experience in Tools like ServiceNow is advantageous
Supporting Production Environment with proper Change management
About UsHoneywell helps organizations solve the world's most complex challenges in automation, the future of aviation and energy transition. As a trusted partner, we provide actionable solutions and innovation through our Aerospace Technologies, Building Automation, Energy and Sustainability Solutions, and Industrial Automation business segments – powered by our Honeywell Forge software – that help make the world smarter, safer and more sustainable.Skills Required
- Active Directory domain build, domain controller promotion and demotion
- AD replication, DNS, Group Policy (GPOs), FSMO roles, AD certificate management and troubleshooting
- Design and implement backup strategies for domain controllers (BMR/RMAD/Azure Backups)
- Configure Microsoft Defender for Identity (MDI) and Microsoft Defender for Endpoint (MDE) on domain controllers
- Perform AD health checks, upgrades, patching and security hardening
- AD migrations (on-prem to on-prem and on-prem to Entra ID)
- Strong experience with Entra ID/Azure AD, AAD Connect and hybrid identity setups
- Experience with Entra ID features: users, groups, external identities, SSPR, PIM, Identity Protection
- Configure AD/AD Security/Azure assessments across domains/tenants and remediate recommendations
- Design and implement Conditional Access policies and enforce MFA with production testing
- PowerShell scripting and KQL queries for reporting, automation and administration
- Work with vulnerability management and compliance teams to mitigate risks
- Support production environments with proper change management
- Experience with ServiceNow





