Senior Kerberos Specialist

Responsibilities

Profile

• Reproduce the authentication and delegation chain via Kestrel, COM/DCOM, and the Application Server and clearly identify the causes of ticket, identity, and delegation problems.
• Develop a documented and supportable solution that eliminates implicit NTLM transition, considers SPN/UPN resolution, and enables reusable GSSAPI security contexts.
• Implement the necessary adjustments in C# and C++ and test them for operation under Service Account and Local System in representative multi-domain constellations.
• Document the diagnostic path, operating requirements, and test results, and hand over the solution in a structured manner to the internal development team.
• Robust project experience with Kerberos in multi-domain environments, especially Active Directory trusts, SPNs, service accounts, and cross-domain delegation.
• Deep understanding of authentication and impersonation via COM/DCOM in native and managed applications.
• Practical development experience with C# and C++ as well as at interfaces between .NET and native components.
• Practical experience with Kestrel and ASP.NET Core, especially integration and error analysis of Windows authentication with Negotiate and Kerberos.
• Deep understanding of GSSAPI, SSPI, and the Windows logon process, including LSA, logon sessions, access tokens, and security contexts.
• Sound SPNEGO knowledge; confident differentiation and diagnosis of actual Kerberos usage and possible NTLM fallback.

Project details

• Start: sofort
• Remote: remote
• Location: remote, Niedersachsen, DE, DE
• Languages: German

Source notes

• Project start: ASAP
• Option for extension
• Remote possibility