Active Directory Security & Hardening Architect

Join Tata Consultancy Services, Asia Pacific and be part of an organization committed to sustainable development for our future. TCS follows the Tata group philosophy of building sustainable businesses that are rooted in the community and demonstrate care for the environment. Our unique values position us to combine a purpose-driven worldview with digital innovation, collaborating with customers, communities and governments to lead and shape innovative solutions for a sustainable future. TCS has been carbon neutral in its operations across 11 countries, 12 delivery centres and 18 offices in Asia Pacific since 2022. This is only the initial stage in TCS’ journey as we strive to achieve long-term net zero emissions by 2030.

Corporate sustainability is embedded in our triple-bottom-line, focusing on people, the planet, and our purpose. Our offices are designed with eco-friendly features that significantly reduce our carbon footprint and enhance energy efficiency. We actively champion green initiatives, such as promoting paperless operations, implementing energy-efficient practices, and fostering employee engagement in sustainability efforts. When you become part of the TCS family, you will play an essential role dedicated to innovation, excellence, and crafting a brighter, greener future together. Join us and be a part of our mission to drive sustainability through technology and talent at Tata Consultancy Services, APAC today.

Job Description :

Role : Active Directory Security & Hardening Architect

Location : Sydney

Experience : 8-12Yrs

Key Responsibilities:

Active Directory Security & Health

• Perform comprehensive Active Directory health checks , including domain controllers, replication, trust relationships, and security posture.
• Identify vulnerabilities, misconfigurations, and risk exposure within AD environments.

AD Hardening & Security Architecture

• Drive end-to-end AD hardening initiatives aligned with industry best practices and Microsoft security recommendations.
• Design and implement tiered AD architecture models (Tier 0/1/2) and privileged access controls.

Group Policy (GPO) Optimization

• Conduct GPO review and clean-up , eliminating redundant or conflicting policies.
• Standardize GPOs aligned with security baseline and compliance requirements.

Secure Migration & Transformation Planning

• Design and execute migration plans for AD hardening , including:
• Secure LDAP (LDAPS) enablement
• SMB signing implementation
• NTLM hardening and mitigation of NTLM relay attacks
• Legacy protocol decommissioning

Standard Operating Environment (SOE) Review

• Perform security assessment of SOE across servers and endpoints .
• Recommend and implement security controls aligned with enterprise standards.

Microsoft Security Baseline Implementation

• Implement and enforce Microsoft Security Baselines , covering:
• Windows Servers
• User Endpoints (Windows 10/11)
• Ensure alignment with CIS/Microsoft recommended configurations.

Documentation & Governance

• Develop detailed documentation including:
• AD architecture diagrams
• Hardening guidelines
• Migration and remediation plans
• Support audit, compliance, and governance requirements.

Required Skills & Expertise

Core Technical Skills

• Strong expertise in:
• Active Directory (AD DS, DNS, Group Policy)
• AD security hardening techniques
• Identity and access security controls
• Hands-on experience with:
• LDAPS, Kerberos, NTLM controls
• Privileged Access Management (PAM) concepts
• AD auditing and monitoring tools

Security & Architecture

• Experience in enterprise security architecture design
• Understanding of:
• Zero Trust principles
• Identity security frameworks
• Microsoft security ecosystem (Defender, Entra ID, etc.)

Baseline & Compliance

• Implementation of:
• Microsoft Security Baselines
• CIS benchmarks
• Experience with compliance frameworks (ISO 27001, NIST, etc.)

Top Reasons to Join Our Team at TCS Australia

Attractive compensation & rewards

We offer a highly competitive salary package aligned with the Australian market, complemented by performance-based incentives, recognition programs, and comprehensive employee benefits. Your achievements are celebrated, and your contributions truly matter.

Global exposure with local impact

At TCS, you’ll work with leading Australian enterprises across diverse industries while collaborating with our global network of experts. This means access to world-class practices, transformative technologies, and the chance to shape solutions that have a real impact — locally and globally.

Empowering leadership & supportive environment

Our leadership team is committed to helping you succeed. We encourage initiative, reward innovation, and provide a collaborative environment where your ideas are heard and valued.

Long-term career growth

We believe in careers, not just jobs. With continuous learning, certification support, career mobility, and clear progression pathways, TCS empowers you to grow and evolve — whether you want to deepen your expertise, explore new domains, or take on leadership roles.

Inclusive, collaborative culture

Diversity, inclusion, and respect are central to who we are. At TCS Australia, you’ll join a workplace where collaboration thrives, individuality is valued, and everyone can contribute to meaningful outcomes.