Nair Systems is currently looking Active Directory Security - IAM, PAM for our Qatar operations. Required Experience & Skills• 8+ years in Identity Security / Security Engineering• Deep hands‑on experience with:• Active Directory security• Microsoft Entra ID security• Conditional Access, MFA, Identity Protection• Strong PAM / PIM implementation experience• SOC‑level understanding of identity attack detection and response• Strong troubleshooting and root‑cause analysis skills• Excellent written and verbal communication skills Core Responsibilities• Own identity security engineering across Active Directory (on‑prem) and Microsoft Entra ID• Design, implement, and harden identity security configurations• Act as technical authority for identity threat prevention, detection, and response• Bridge Identity Engineering and SOC / Incident Response• Mitigate Red team findings• Active Directory Security (On‑Prem)• Secure AD DS architecture and configurations• Implement and enforce AD Tiering model (Tier 0 / Tier 1 / Tier 2)• Protect Tier‑0 assets (Domain Controllers, PKI, ADFS, Entra Connect)• Harden:• Kerberos authentication• NTLM usage and restrictions• Delegation (constrained, resource‑based)• GPOs for security baselines• Manage privileged groups and admin separation• Secure trust relationships and forest/domain boundaries• Implement PAW / SAW / hardened admin access patterns• Review and remediate AD attack paths and misconfigurations Entra ID (Azure AD) Security• Design and enforce Conditional Access policies• Implement strong authentication strategies (MFA, passwordless, phishing‑resistant MFA)• Configure and monitor Entra ID Identity Protection• Harden tenant security posture and reduce identity attack surface• Control and monitor:

Joining time frame: 2 weeks (maximum 1 month) Should you be interested in this opportunity, please send your latest resume in MS Word format at the earliest at [Click to show email]