8+ years of hands-on experience in managing and securing large-scale, enterprise Active Directory environments. Expertise in AD internals: replication, trusts, GPOs, DNS, LDAP, Kerberos, NTLM, and delegation models. Proven knowledge and operational experience with Tier-0 protection, identity security tiering, and zero trust principles. Strong scripting skills (PowerShell mandatory) for automation, auditing, and policy enforcement. Hands-on experience with Microsoft Defender for Identity (MDI), LAPS, SIEM tools, and Group Policy Management. Familiarity with identity threat tools (e.g., BloodHound, PingCastle, Mimikatz - for defensive use). Solid understanding of incident response and forensics in the context of AD and credential attacks. Experience designing and supporting Privileged Access Management (PAM) and secure administrative workflows.
