Technical Project Manager Active Directory / AD Hardening (M/F)

Project overview

As part of a strategic program (approx. 350 days) to secure Active Directory, we are looking for a senior Technical Project Manager capable of leading and executing a security remediation plan.

The program covers several critical workstreams (ACLs, privileged accounts, GPOs, Kerberos, obsolete protocols, ADCS, LAPS, tiering) requiring both structured management and direct technical actions within AD.

After a 3-year carve-out and 2 years of autonomy, the client's IT department took over AD "as is" with numerous vulnerabilities.

Three audits (internal cyber + external firms, tools like PingCastle, etc.) have produced a structured, extensive action plan, which has been in execution for a month.

Mission Objectives

Project Management

Technical Execution

Coordination

Quality and Security

Technical Scope

Deliverables

• Lead the Active Directory remediation program (planning, etc.)
• Prioritize and orchestrate actions based on risks
• Coordinate internal and external technical teams
• Perform or supervise technical actions in AD
• Significantly reduce identity infrastructure vulnerabilities
• Translate business impacts
• Definition of the remediation plan (priorities, schedule, dependencies)
• Progress tracking, risk management, and reporting
• Facilitation of steering committees and arbitration
• Direct intervention on Active Directory (ACLs, GPOs, privileged accounts)
• Implementation of remediations (passwords, service accounts, AD hardening)
• Handling of Kerberos, NTLM, LDAP/LDAPS, obsolete protocols topics
• Implementation or optimization of LAPS, gMSA, ADCS, tiering
• Interface between infrastructure, security, EUS teams, and partners
• Organization of technical workshops
• Definition of test and rollback plans
• Change documentation
• Securing production deployments
• Active Directory (objects, ACLs, GPOs, delegations)
• Privileged accounts and identity security
• Authentication protocols (Kerberos, NTLM, LDAP)
• Tools: PowerShell, BloodHound, LAPS, ADCS
• Microsoft Windows Server environment
• Remediation plan
• Schedule and tracking
• Reporting
• Technical documents
• Test and rollback plans
• Documentation

Project details

• Start: flexible
• Remote: hybrid
• Location: Paris, France, FR
• Languages: French