Microsoft Security Engineer

#Only w2/Full Time

Microsoft Security Engineer
Location: Los Angeles, CA (On-site/Hybrid)
Experience Required: 7+ Years

We are seeking a Microsoft Security Engineer for a direct client engagement in LA. You will focus on enhancing the Certificate Authority (CA) system and securing directory services against sophisticated attacks.

Responsibilities:
Improve the CA system for managing digital services using certificate-based communication.
Enhance security for directory services (Active Directory) using certificate-based authentication.
Troubleshoot and implement solutions involving LDAP signatures and Channel Binding Tokens (CBTs) .
Enforce PowerShell logging and script block logging across all endpoints.
Integrate advanced authentication methods including MFA and secure hardware keys (e.g., YubiKeys).

Requirements:
7+ years of experience in Microsoft security engineering.
Deep experience with Active Directory Certificate Services (AD CS).
Strong knowledge of LDAP security, including signing requirements and CBTs.
Proficiency in PowerShell for security automation and auditing.
Familiarity with MFA integrations and hardware security keys.