Active Directory Security Engineer (Contract) – Gurgaon - Hybrid Opportunity

World Wide Technology (WWT), a 36-year-old global technology solutions provider specializing in systems integration, Infra-Cloud security, application development, AI Services, and supply chain solutions. With a workforce of 10,000+ employees and strategic partnerships with leading OEMs such as Cisco, Dell EMC, Microsoft, and NVIDIA, WWT delivers cutting-edge infrastructure, cloud, security, and custom application services to clients across 35 countries. Our Advanced Technology Centers (ATCs)—lab setup environments spanning over one million square feet of world-class integration and distribution space enable us to deliver unmatched value and innovation at scale. Recognized as one of the Best Places to Work by Glassdoor and Fortune for 14 consecutive years, WWT is also ranked #6 on India's Great Place to Work list for 2025.

Worldwide Technology Holding Co, LLC. (WWT) Currently has an exciting opportunity available for the role of Active Directory Security Engineer - Hybrid Contract role at Gurgaon. If you are interested in this opportunity, please respond with an updated resume and the required details at the bottom of this email.

Active Directory Security Engineer (Contract) – India (Gurgaon)

Work Location- Building no. 9, Candor Tech Space, IT/ITES SEZ, Tikri, Sector 48, Gurugram, Haryana 122018

Work Mode- hybrid 3 days work from office & 2 days remote

Contract: 12+ Months with possibility of extensions

Role Overview

We are seeking a senior, handson Active Directory Security Engineer to support a long running programme of Active Directory hardening and enhancement. This role will focus on reducing technical debt, improving authentication security, and supporting application teams through protocol and service account remediation.

This is an independent contributor role, suited to an experienced engineer who can operate with minimal supervision.

Key Responsibilities

• Deliver Active Directory security hardening and enhancement across the enterprise
• Reduce legacy technical debt within Active Directory
• Lead authentication and protocol improvements, including:
• Migration from NTLMv2 to Kerberos
• Disabling RC4
• Enforcing LDAP channel binding
• Reviewing and remediating ACLs
• Assessing and potentially enabling SMB signing
• Improve service account hygiene, including analysis, remediation, and coordination with application teams
• Analyse authentication and security logs to identify risks and remediation actions
• Advise application teams on required changes and security impacts
• Work independently on protocol and identity related issues without requiring day-to-day direction

Required Skills & Experience

• Strong engineering background with deep Active Directory security expertise
• In depth knowledge of Kerberos, NTLM, LDAP, SMB, and Windows authentication
• Proven experience hardening Active Directory in large or complex environments
• Strong troubleshooting and log analysis skills
• Ability to work autonomously and take ownership of complex security changes
• Clear communication skills when working with infrastructure and application teams