Automation Lead – Active Directory (Hybrid, Toronto)

About the role

We are seeking an Automation Lead specialized in Microsoft Active Directory to join our BFSI team in Toronto. The role is hybrid, requiring two days per week on‑site, and focuses on designing, automating, and maintaining AD infrastructure.

Key responsibilities

• Administer and troubleshoot Active Directory environments, including domains, forests, trusts, and replication.
• Develop and maintain Group Policy Objects (GPO) and ensure compliance across the organization.
• Automate routine AD tasks using PowerShell scripting.
• Design and manage AD CS/PKI infrastructure, including certificate authorities and templates.
• Support Windows Server platforms (2008, 2012 and newer) and related services such as DNS, DFS/DFSR, and SYSVOL.

Required profile

• 7+ years of hands‑on Active Directory administration.
• Strong experience with Group Policy, OU design, permissions, and delegation.
• Proven ability to script and automate tasks with PowerShell.
• Experience in a BFSI or similar regulated environment is a plus.

Required skills

• Microsoft Active Directory administration
• Group Policy (GPO) management
• PowerShell scripting
• AD domains, forests, trusts, FSMO roles, Kerberos, KDCs
• DNS, Sites & Services, replication
• Windows Server 2008/2012 and newer
• OU design, permissions, delegation, security groups, schema management
• AD CS/PKI, CA hierarchy, certificate templates, issuance, renewal, revocation
• DFS/DFSR, SYSVOL troubleshooting

What we offer

• Competitive hourly rate (CAD 45‑48)
• 6‑month contract with potential extension
• Hybrid work arrangement
• Opportunity to work on critical infrastructure in a leading financial services firm