Proven architecture-level experience securing complex, multi-domain Active Directory estates.
Deep knowledge of AD tiering, Kerberos, privileged groups, delegation, GPO security design and Domain Controller hardening.
Practical experience of CIS Benchmarks, Microsoft security baselines, exception governance and controlled Production delivery

Proven architecture-level experience securing complex, multi-domain Active Directory estates.
Deep knowledge of AD tiering, Kerberos, privileged groups, delegation, GPO security design and Domain Controller hardening.
Practical experience of CIS Benchmarks, Microsoft security baselines, exception governance and controlled Production delivery

Define the target security architecture, including Tier 0 protection, tiered OU model, privileged access model,



administrative account separation and GPO security architecture.
Own and approve the directory-side hardening design: GPO standards, naming conventions, GPO delegation controls, advanced audit settings, Kerberos controls and default policy cleansing.
Interpret CIS Level 1 requirements for Domain and Domain Controller cohorts, approve justified exceptions and ensure controls remain proportionate to operational risk.
Provide technical assurance for pilot results, Production wave readiness, high-risk exceptions and final evidence acceptance.

📌 Active Directory Specialist (India)
🏢 Innova ESI
📍 India