Security Engineer

h3Security Engineer /h3 pOur client is seeking an Active Directory (AD) and Privileged Access Management (PAM) expert to reinforce the security and governance of its identity infrastructure. The mission focuses on two complementary areas: 1) Improving the security posture of Active Directory by addressing identified vulnerabilities and increasing the PingCastle security score, and 2) Designing and implementing a Privileged Access Management (PAM) framework to ensure least privilege, controlled elevation, and auditable privileged access. The expert will join the Security Team. /p h3Quantitative Data /h3 ul liThe mission covers all Active Directory forests and domains, as well as all processes and tools related to privileged access and identity governance. /li liImprove the PingCastle security score. /li liSupport in selecting and Implementing new PAM Solution /li /ul h3Main purposes /h3 h31. Active Directory Hardening /h3 ul liAssess and enhance the current security posture of Active Directory. /li liIdentify and remediate key technical weaknesses detected by PingCastle. /li liEliminate legacy components and protocols (e.g., Windows Server 2003/2008, DES-enabled accounts, NTLMv1, LM). /li liImplement secure authentication and password policies. /li liReview and clean up GPOs, apply least privilege principles, and align configurations with Microsoft security baselines. /li /ul h32. Privileged Access Management (PAM) /h3 ul liImplement a structured PAM framework. /li liEnforce the Principle of Least Privilege (PoLP) and Role-Based Privilege Assignment. Implement Access Isolation. /li liEstablish Periodic Access Reviews (e.g., quarterly). /li liDefine and implement an Authorization Process (standardized, auditable approval workflow). /li liImplement Just-in-Time (JIT) Access for temporary privilege elevation. /li liEnforce the Four-Eyes Principle for critical privileged actions. /li /ul h33. Documentation, Reporting, and Governance /h3 ul liDevelop a detailed remediation and implementation roadmap (AD + PAM). /li liDocument all technical actions (initial state, final configuration, scripts/tools used). /li liDeliver regular progress reports (weekly or bi-weekly). /li liProduce a final report summarizing actions, residual risks, and recommendations. /li /ul h3Collaboration: /h3 pThe expert will operate as part of the Security Team, collaborating closely with AD administrators, IAM specialists, and infrastructure engineers. (Presence required 3 days on site and 2 days remote). /p h3Key Performance indicators /h3 ul liAchievement and improvement of the target PingCastle security score for Active Directory. /li liSuccessful and complete implementation and governance of the PAM framework components (e.g., PoLP, JIT, Four-Eyes Principle). /li liOn-time delivery of AD/PAM remediation documentation and reports. /li liContribution to the analysis and implementation of the Microsoft Tiering Model. /li /ul h3Skills required /h3 h3Technical

Skills:
/h3 ul liProven experience in Active Directory architecture, security, and hardening. /li liStrong expertise in Privileged Access Management (PAM) and Microsoft Tiering Model. /li liProficiency with PowerShell, PingCastle, ADManager, and Splunk. /li liFamiliarity with Privileged Access Workstations (PAWs), RBAC, and IAM integration. /li liSolid understanding of service account security and least privilege enforcement. /li /ul h3Soft

Skills:
/h3 ul liStrong collaboration skills within multidisciplinary teams. /li liHigh documentation standards and structured working approach. /li liAnalytical mindset, attention to detail, and communication clarity. /li liAbility to lead or participate in workshops (RBAC, PAM, governance design). /li /ul