The position at a glanceIntegrated within the ProdSec / Active Directory teams, the AD engineer is responsible for the design, operation, security, and evolution of Active Directory On-Prem services within an international, distributed, and highly secured environment.
In detail- Administer and harden Corporate, Resources, and Isolation AD forests to maintain a secure and resilient identity perimeter.
- Manage Domain Controllers, GPOs, DNS, and replication processes to ensure seamless service availability across distributed sites.
- Oversee Entra ID, IAM, and AD Connect to facilitate secure and integrated identity governance.
- Execute automation via PowerShell to industrialize operations such as audits, provisioning, and remediation.
- Contribute to the AD Disaster Recovery Plan by managing detection, restoration, and technical communication to ensure business continuity.
- Monitor and audit environments using Change Auditor, EDR, and log collection to maintain high security standards.
- Participate in transversal projects including M&A and application integration to support organizational growth and compliance.
- Document technical processes and governance standards to ensure knowledge sharing and operational consistency.
- Collaborate with stakeholders on group projects like AD consolidation and DNS redesign to improve infrastructure efficiency.
The strengths and skills that will help you succeed- Bachelor's degree in a relevant field.
- The knowledge of English and French is required.*
- Minimum 5 years of significant experience in AD and Entra ID.
- Expert Active Directory Domain Services, DNS, GPO, PKI, and ADFS for managing critical infrastructure.
- Entra ID, Azure AD Connect, and Identity Governance for securing cloud-hybrid identities.
- Advanced PowerShell for automating audits and remediation scripts.
- Security concepts including RBAC, Zero Trust, MFA, and AD Tiering to protect sensitive environments.
- AD DRP/BCP knowledge to support disaster recovery and business continuity efforts.
- Clear verbal and written communication for effective upward and downward reporting.
- Responsible prioritization when managing multiple competing tasks.
- Collaborative relationship building to create trust with colleagues and stakeholders.
- Committed security awareness and rigor when operating within critical environments.
*Given the vast majority of our clients, both internal and external, are based outside of Quebec and Canada, specific language requirements may apply. Professional working proficiency in French and English languages are required.
What's in it for youIn addition to competitive compensation, we offer flexible benefits including a family and spouse insurance program, a defined contribution pension plan and paid days for volunteering. Hybrid work arrangements are available for most positions. In-office presence is required a minimum of 3 days per week, one of which must be on a Monday and/or a Friday. BNP Paribas provides excellent training and personal development programs, as well as opportunities for career development within the company and internationally.
To find out more about our range of benefits, click here
What you need to know- We will review candidates as they apply, so don't wait to submit your application;
