8+ years of hands-on experience in managing and securing large-scale, enterprise Active Directory environments.
Expertise in AD internals: replication, trusts, GPOs, DNS, LDAP, Kerberos, NTLM, and delegation models.
Proven knowledge and operational experience with Tier-0 protection, identity security tiering, and zero trust principles.
Solid scripting skills (PowerShell mandatory) for automation, auditing, and policy enforcement.
Hands-on experience with Microsoft Defender for Identity (MDI), LAPS, SIEM tools, and Group Policy Management.
Familiarity with identity threat tools (e.g., BloodHound, PingCastle, Mimikatz - for defensive use).
Solid understanding of incident response and forensics in the context of AD and credential attacks.
Experience designing and supporting Privileged Access Management (PAM) and secure administrative workflows.