Senior Security Engineer

About the role

We are looking for a Senior Security Engineer to lead our Active Directory Hygiene Initiative. The role focuses on remediating security, configuration and architectural issues in the AD environment while collaborating closely with Security Engineering and Infrastructure teams.

Key responsibilities

• Analyze, design and improve the Active Directory environment to meet modern security and operational standards.
• Remediate security, configuration and architectural issues across the existing AD infrastructure.
• Implement AD security hardening measures such as Tiering, ESAE/Red Forest and Privileged Access Management.
• Design and govern forest, domain and Group Policy structures.
• Manage AD replication, DNS architecture and hybrid integration with Microsoft Entra ID.
• Support identity and access management processes, including ADFS and Kerberos authentication flows.
• Develop PowerShell automation and scripting to streamline operational tasks.
• Plan and execute AD migration, consolidation (ADMT), disaster recovery and backup/restore activities.
• Ensure auditing and compliance alignment with NIST and DORA frameworks.
• Collaborate with security, architecture and infrastructure stakeholders on large‑scale enterprise initiatives.

Required profile

• 3+ years of experience as a Security Engineer in large‑scale enterprise environments.
• Strong communication skills and ability to work with cross‑functional teams.
• Fluent English (B2+ level) – spoken and written.

Required skills

• Active Directory architecture, forest and domain management.
• AD security hardening (Tiering, ESAE/Red Forest, PAM).
• Identity & Access Management, Microsoft Entra ID hybrid integration, ADFS.
• Group Policy design and governance.
• AD replication, DNS architecture.
• PKI / AD Certificate Services, Kerberos authentication flows.
• PowerShell automation and scripting.
• ADMT migration and consolidation, disaster recovery, backup/restore.
• Auditing and compliance frameworks (NIST, DORA).
• Solid networking fundamentals.

What we offer

• Engineering heritage with over 30 years of expertise.
• Access to an advanced tech stack covering Cloud, Data, AI and more.
• Opportunities to work remotely from anywhere in Lithuania or from our Vilnius and Kaunas offices.