Senior Active Directory & Identity Specialist

Montréal, QC
On-site
Posted Oct 27, 2026
1 position

Opens an external site

Employment type: Full-time
Experience level: Lead · 10+ years
Minimum education: Professional degree
Posting language: English
Working hours: 40 hours per week

Job summary

The role involves providing technical leadership for the design, administration, and security of a complex multi-domain Active Directory environment. Responsibilities include troubleshooting identity services, managing group policies, and leading infrastructure transformation initiatives.

Job details

Domtar is a leading producer of pulp, paper, packaging, tissue and wood products. Through our focus on safety and sustainability, as well as our commitment to operational excellence and our network of facilities across Canada and the United States, Domtar delivers high-quality and cost-effective products to customers around the world. Our workforce is comprised of 14,000 talented and hardworking individuals. We are proud to offer competitive compensation, a supportive working environment, rewarding career paths and plenty of opportunities for learning and growth. The location in Montreal, Quebec, Canada, is seeking talent to fill the position of Senior Active Directory & Identity Specialist. This job is full-time permanent. We are seeking a Senior Active Directory & Identity Specialist to provide technical leadership for a complex enterprise Active Directory environment. The role is responsible for the design, administration, security, troubleshooting and continuous improvement of Active Directory across multiple domains and forests. The successful candidate will act as a subject matter expert for AD technologies, Specops and related Windows identity services. Key Responsibilities Design, administer and optimize complex multi-domain, multi-forest Active Directory environments. Manage and troubleshoot domain controllers, replication, FSMO roles, Global Catalog, Sites and Services, trusts, authentication and DNS. Design, administer and troubleshoot Group Policy, including GPO security, delegation, inheritance and lifecycle management. Act as the technical SME for Specops, including password policy, password security and related AD integrations. Implement and maintain Active Directory security best practices, privileged access controls, delegation and administrative account protections. Support Microsoft PKI / Active Directory Certificate Services, NDES/SCEP and certificate-related services. Support LAPS, service accounts, authentication services and other core Windows identity technologies. Provide Level 3 technical support, root-cause analysis and resolution of complex AD and authentication incidents. Lead or contribute to AD migrations, forest/domain consolidations, integrations and infrastructure transformation initiatives. Develop PowerShell automation and operational improvements while maintaining technical standards and documentation. Required Qualifications 8+ years of hands-on experience with Microsoft Active Directory in enterprise environments. Strong proven experience with multi-domain and multi-forest architectures. Advanced knowledge of Active Directory, Group Policy, DNS, Kerberos, LDAP, trusts and replication. Hands-on experience with Specops Password Policy and related Specops solutions. Strong Active Directory security and troubleshooting experience. Strong PowerShell scripting and automation skills. Experience with Windows Server and enterprise infrastructure operations. Preferred Qualifications Experience with AD migrations, forest consolidations and mergers/acquisitions. Experience with Microsoft PKI/AD CS, NDES/SCEP and LAPS. Experience with CyberArk or other privileged access management solutions. Experience with Purple Knight or similar Active Directory security assessment tools. Experience with Quest GPOADmin or equivalent GPO management solutions. Relevant Microsoft, security or Specops certifications. Key Competencies Strong analytical and problem-solving skills; ability to troubleshoot complex enterprise environments; strong security mindset; excellent communication and documentation skills; ability to work independently and collaboratively; strong ownership and continuous-improvement mindset. Domtar is firmly committed to placing greater emphasis on the principles of equity, diversity and inclusion to empower all employees to reach their full potential. We form a dynamic team whose diverse backgrounds and wealth of perspectives are one of the keys to our success. We offer an inclusive, rewarding and safe work environment with opportunities that will help grow your skills. To learn more about our company, consult the Domtar Company Web Site and follow us on LinkedIn, Instagram and Twitter.

What you’ll do

Requirements

Candidates must have at least 8 years of hands-on experience with Microsoft Active Directory in enterprise environments. Strong proficiency in multi-forest architectures, PowerShell scripting, and identity security best practices is required.