Consultant System Engineer

Job Responsibilities :

Position Overview

Experience 15+

As part of the Global Active Directory Governance organization, the Senior Active Directory Security Expert will provide advanced Active Directory expertise and security advisory services to SG entities worldwide.

The role focuses on architecture reviews, security assessments, risk analysis, compliance reviews, remediation support, and expert guidance to local Active Directory teams.

Working closely with the existing global team of approximately 40 Active Directory specialists across APAC, EMEA, and AMER, the candidate will act as a recognized Active Directory Subject Matter Expert and trusted advisor for subsidiaries and operational teams.

The objective is to improve the overall security posture, resilience, compliance, and standardization of Active Directory environments across the Group.

Key Responsibilities

Active Directory Expertise & Advisory

• Provide expert-level guidance on Active Directory architecture, security, and best practices.
• Support SG entities on complex AD transformation and modernization initiatives.
• Review Active Directory architectures and technical designs.
• Advise local teams regarding Microsoft best practices and Group standards.
• Support projects involving domain consolidation, trust relationships, migrations, and security enhancements.

Security Assessments & Compliance Reviews

• Perform Active Directory health checks and security assessments.
• Analyze PingCastle reports and security findings.
• Review Qualys vulnerabilities affecting Active Directory services.
• Assess compliance against ORADAD, ADRAC, CIS Benchmarks, and NIST controls.
• Identify security gaps and recommend remediation actions.

Risk Analysis & Remediation Support

• Conduct risk assessments on Active Directory environments.
• Support entities in the implementation of remediation plans.
• Assist local teams with root-cause analysis and security investigations.
• Drive continuous improvement initiatives and hardening activities.

Global Collaboration & Coordination

• Collaborate with operational teams across APAC, EMEA, and AMER.
• Coordinate technical reviews with regional Active Directory experts.
• Contribute to the evolution of Group security standards.
• Share knowledge and lessons learned across the worldwide AD community.
• Support global governance initiatives through technical expertise.

KPI Monitoring & Continuous Improvement

• Track remediation progress and security improvement actions.
• Contribute to security dashboards and KPI reporting.
• Monitor compliance evolution and security maturity.
• Support the measurement of Active Directory security posture across entities.

Expected Deliverables

Security Assessments

• Active Directory Security Assessment Reports.
• PingCastle Review Reports.
• Qualys Vulnerability Analysis Reports.
• AD Health Check Reports.
• AD Maturity Assessment Reports.
• Trust Relationship Security Reviews.

Advisory & Technical Deliverables

• Architecture Review Reports.
• Technical Recommendations.
• Remediation Roadmaps.
• Security Improvement Plans.
• Best-Practice Guidelines.
• Active Directory Technical Standards Contributions.

Documentation

• Active Directory Security Baselines.
• Hardening Recommendations.
• Reference Architectures.
• Technical Guidelines.
• Operational Best Practices.

KPI & Reporting Contributions

• Entity Compliance Reviews.
• Security Metrics Contributions.
• Remediation Tracking Reports.
• Risk Assessment Summaries.
• Technical Status Reporting.
• Experience with:
  • PingCastle (or equivalent assessment tools)
  • Qualys VMDR
  • ORADAD
  • ADRAC
  • CIS Benchmarks
  • NIST Framework
  • Microsoft Defender Suite
• Strong consulting and problem-solving capabilities.
• Excellent communication skills and ability to engage with international stakeholders.
• Experience working within large multinational environments.

Required Skills & Experience

• 15+ years of experience in Microsoft Active Directory administration, engineering, architecture, or security.
• Deep expertise in Active Directory hardening and identity security.
• Strong technical knowledge of:
  • Active Directory
  • DNS
  • Kerberos
  • LDAP
  • PKI
  • Group Policies
  • Authentication and Trust Relationships
  • Microsoft Identity Technologies

Environment

At Société Générale, we are convinced that people are drivers of change, and that the world of
tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious.
Whether you’re joining us for a period of months, years or your entire career, together we can have
a positive impact on the future. Creating, daring, innovating and taking action are part of our DNA.
If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a
daily basis and develop or strengthen your expertise, you will feel right at home with us!
Still hesitating?
You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices, and sharing their skills with charities. There are many ways to get involved.

We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection.

Environment

At Société Générale, we are convinced that people are drivers of change, and that the world of
tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious.
Whether you’re joining us for a period of months, years or your entire career, together we can have
a positive impact on the future. Creating, daring, innovating and taking action are part of our DNA.
If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a
daily basis and develop or strengthen your expertise, you will feel right at home with us!
Still hesitating?
You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices, and sharing their skills with charities. There are many ways to get involved.

We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection.