Qureos Mentor

New England Info Tech

Active Directory Modernization &amp; Zero Trust POC Implementation SpecialistContract Position: 3-4 Month Engagement | Remote (India-based preferred)About the ProjectWe seek an experienced Active Directory and Citrix specialist to lead a Proof of Concept (POC) for implementing Zero Trust security principles and modern privilege management in a test environment. This POC will establish best practices and automation frameworks for potential enterprise-wide deployment.Our POC environment simulates a typical enterprise setup with approximately 80 Windows servers, Citrix Virtual Apps infrastructure, and AWS Managed Microsoft AD serving 200+ users. The goal is to develop and validate a methodology for transitioning from traditional broad-access models to granular, role-based permissions without disrupting business operations.Project Objectives<ul><li>Design and implement a least-privilege access model in the POC environment</li><li>Develop automation frameworks for privilege management and monitoring</li><li>Create application compatibility solutions without relying on elevated privileges</li><li>Establish security baselines aligned with Zero Trust principles</li><li>Document repeatable processes for potential production deployment</li></ul>Key Responsibilities: Assessment &amp; Architecture (Weeks 1-2)<ul><li>Evaluate current POC Responsibilities: Assessment environment configuration</li><li>Design target state architecture following Microsoft/AWS best practices</li><li>Develop risk-free migration methodology</li><li>Create comprehensive testing procedures</li></ul>Implementation (Weeks 3-10)<ul><li>Configure granular AD security groups and GPO structure</li><li>Implement privilege access management (PAM) solutions</li><li>Resolve application compatibility challenges using modern approaches (App-V, FSLogix, shimming)</li><li>Optimize Citrix policies for security without impacting user experience</li><li>Develop PowerShell automation for repeatable deployments</li></ul>Validation &amp; Documentation (Weeks 11-14)<ul><li>Conduct security validation testing</li><li>Create operational runbooks and procedures</li><li>Develop monitoring and alerting frameworks</li><li>Provide knowledge transfer sessions (recorded)</li></ul>Required Technical SkillsMust Have:<ul><li>5+ years Active Directory design and security hardening</li><li>3+ years Citrix Virtual Apps/XenApp administration</li><li>Expert-level PowerShell scripting and automation</li><li>Experience with AWS Managed Microsoft AD or similar cloud AD services</li><li>Proven track record of privilege reduction projects</li><li>Strong understanding of Kerberos, NTLM, and Windows authentication</li><li>Application compatibility resolution (ACT, App-V, MSIX)</li></ul>Preferred:<ul><li>Healthcare/Biotech industry experience</li><li>HIPAA/GxP compliance knowledge</li><li>Security certifications (CISSP, CySA+, CEH)</li><li>Experience with FSLogix, Citrix WEM, or similar technologies</li><li>Six Sigma or ITIL methodology experience</li></ul>Project Environment Details<ul><li>Windows Server 2016/2019/2022 mixed environment</li><li>Citrix Virtual Apps (for application delivery and RDP-like sessions)</li><li>AWS Managed Microsoft AD</li><li>Mixed application portfolio (COTS, web apps, legacy desktop applications)</li><li>Integration with SQL Server and IIS-hosted applications</li><li>24x7 operational requirement (changes must be non-disruptive)</li></ul>Deliverables<ul><li>Assessment Report - Current state analysis and recommendations</li><li>Architecture Documentation - Target state design and migration path</li><li>PowerShell Script Library - Automated deployment and management tools</li><li>Operational Runbooks - Step-by-step procedures for ongoing management</li><li>Security Validation Report - Testing results and compliance verification</li><li>Knowledge Transfer - Recorded training sessions and Q&amp;A documentation</li></ul>Engagement Terms<ul><li>Duration: 3-4 months (with possible extension for production rollout)</li><li>Time Zone: Flexible, but must accommodate 2-3 hours overlap with US EST</li><li>Rate: Competitive based on experience ($25-45 USD/hour or fixed project cost)</li><li>Location: Remote (India-based preferred for cost optimization)</li></ul>Ideal Candidate ProfileWe're looking for someone who:<ul><li>Has successfully completed similar modernization projects</li><li>Thinks like both a security architect and operations engineer</li><li>Can work independently while providing regular updates</li><li>Writes clear documentation and automation code</li><li>Understands the balance between security and usability</li><li>Has a &quot;measure twice, cut once&quot; approach to production changes</li></ul>How to ApplyPlease submit:<ul><li>Resume/CV highlighting relevant AD and Citrix projects</li><li>Brief case study (1-2 pages) of a similar privilege reduction project you've completed</li><li>Sample PowerShell scripts demonstrating your automation capabilities</li><li>Rate expectations (hourly or fixed project cost)</li><li>Availability to start within 2 weeks</li></ul>Interview Process<ul><li>Initial screening (30 min video call)</li><li>Technical discussion (1 hour - be prepared to discuss approach and past projects)</li><li>Practical exercise (provide solution architecture for sample scenario)</li><li>Final decision within 48 hours</li></ul>Bonus Points For:<ul><li>GitHub repository with relevant PowerShell modules</li><li>Published articles/blogs on AD security</li><li>Contributions to security communities</li><li>Experience with healthcare/biotech compliance requirements</li><li>AWS certifications</li></ul>Project Success Metrics<ul><li>Zero domain-level administrative privileges for standard users</li><li>All applications functional without elevated rights</li><li>Automated monitoring and reporting implemented</li><li>Complete audit trail of all changes</li><li>Reproducible process for future deployments</li></ul>Note: This POC environment is designed to validate approaches before potential enterprise deployment. The successful completion of this project may lead to extended engagement for production implementation and ongoing consultation.To Apply: Send your materials to kunjal.pandya@newenglandinfotech.com/michael.moyer@newenglandinfotech.com with subject line &quot;AD Modernization POC Specialist - [Your Name]&quot;Job Type: Full-timePay: Up to &#8377;1,800.00 per hourExpected hours: 8 per weekBenefits:<ul><li>Flexible schedule</li><li>Work from home</li></ul>Work Location: Remote

Active Directory & Citrix Security Specialist

Join New England Info Tech and explore 1   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

New England Info Tech

ABOUT_COMPANY

Active Directory & Citrix Security Specialist