Active Directory Security & Hardening Architect

Join Tata Consultancy Services, Asia Pacific and be part of an organization committed to sustainable development for our future. TCS follows the Tata group philosophy of building sustainable businesses that are rooted in the community and demonstrate care for the environment. Our unique values position us to combine a purpose-driven worldview with digital innovation, collaborating with customers, communities and governments to lead and shape innovative solutions for a sustainable future. TCS has been carbon neutral in its operations across 11 countries, 12 delivery centres and 18 offices in Asia Pacific since 2022. This is only the initial stage in TCS’ journey as we strive to achieve long-term net zero emissions by 2030. Corporate sustainability is embedded in our triple-bottom-line, focusing on people, the planet, and our purpose. Our offices are designed with eco-friendly features that significantly reduce our carbon footprint and enhance energy efficiency. We actively champion green initiatives, such as promoting paperless operations, implementing energy-efficient practices, and fostering employee engagement in sustainability efforts. When you become part of the TCS family, you will play an essential role dedicated to innovation, excellence, and crafting a brighter, greener future together. Join us and be a part of our mission to drive sustainability through technology and talent at Tata Consultancy Services, APAC today.
Job Description :
Role : Active Directory Security & Hardening ArchitectLocation : SydneyExperience : 8-12Yrs
Key Responsibilities:Active Directory Security & HealthPerform comprehensive Active Directory health checks, including domain controllers, replication, trust relationships, and security posture.Identify vulnerabilities, misconfigurations, and risk exposure within AD environments.AD Hardening & Security ArchitectureDrive end-to-end AD hardening initiatives aligned with industry best practices and Microsoft security recommendations.Design and implement tiered AD architecture models (Tier 0/1/2) and privileged access controls.Group Policy (GPO) OptimizationConduct GPO review and clean-up, eliminating redundant or conflicting policies.Standardize GPOs aligned with security baseline and compliance requirements.Secure Migration & Transformation PlanningDesign and execute migration plans for AD hardening, including:Secure LDAP (LDAPS) enablementSMB signing implementationNTLM hardening and mitigation of NTLM relay attacksLegacy protocol decommissioningStandard Operating Environment (SOE) ReviewPerform security assessment of SOE across servers and endpoints.Recommend and implement security controls aligned with enterprise standards.Microsoft Security Baseline ImplementationImplement and enforce Microsoft Security Baselines, covering:Windows ServersUser Endpoints (Windows 10/11)Ensure alignment with CIS/Microsoft recommended configurations.Documentation & GovernanceDevelop detailed documentation including:AD architecture diagramsHardening guidelinesMigration and remediation plansSupport audit, compliance, and governance requirements.
Required Skills & ExpertiseCore Technical SkillsStrong expertise in:Active Directory (AD DS, DNS, Group Policy)AD security hardening techniquesIdentity and access security controlsHands-on experience with:LDAPS, Kerberos, NTLM controlsPrivileged Access Management (PAM) conceptsAD auditing and monitoring toolsSecurity & ArchitectureExperience in enterprise security architecture designUnderstanding of:Zero Trust principlesIdentity security frameworksMicrosoft security ecosystem (Defender, Entra ID, etc.)Baseline & ComplianceImplementation of:Microsoft Security BaselinesCIS benchmarksExperience with compliance frameworks (ISO 27001, NIST, etc.)
Top Reasons to Join Our Team at TCS AustraliaAttractive compensation & rewardsWe offer a highly competitive salary package aligned with the Australian market, complemented by performance-based incentives, recognition programs, and comprehensive employee benefits. Your achievements are celebrated, and your contributions truly matter.Global exposure with local impactAt TCS, you’ll work with leading Australian enterprises across diverse industries while collaborating with our global network of experts. This means access to world-class practices, transformative technologies, and the chance to shape solutions that have a real impact — locally and globally.Empowering leadership & supportive environmentOur leadership team is committed to helping you succeed. We encourage initiative, reward innovation, and provide a collaborative environment where your ideas are heard and valued.Long-term career growthWe believe in careers, not just jobs. With continuous learning, certification support, career mobility, and clear progression pathways, TCS empowers you to grow and evolve — whether you want to deepen your expertise, explore new domains, or take on leadership roles.Inclusive, collaborative cultureDiversity, inclusion, and respect are central to who we are. At TCS Australia, you’ll join a workplace where collaboration thrives, individuality is valued, and everyone can contribute to meaningful outcomes.