# Companies using NTLM

1,132 companies use NTLM, based on their job posts and their employees' public profiles. Its share of job posts held steady in the three months to August 2026; 512 job posts named it from October 2025 to August 2026. Identity & Access Management (IAM) roles mention it most.

Data as of November 9, 2026. Source: Sumble.

## Which companies name NTLM in the most job posts?

CrowdStrike and Avanade have the most job posts naming NTLM, with 59 and 59. Of the five companies in the table, Microsoft has the most employees who list it on their profiles: 28.

| Company | Job posts | People | Recent job post |
|---|---:|---:|---|
| [CrowdStrike](https://sumble.com/orgs/crowdstrike) | 59 | 3 | "Excellent knowledge of authentication protocols including Kerberos, Lightweight Directory Access Protocol (LDAP), NTLM and SAML" (Technical Support Engineer, Korean-speaking (Remote, AUS), Oct 22, 2026) |
| [Avanade](https://sumble.com/orgs/avanade) | 59 | 3 | "Strong knowledge of Active Directory security, resilience, and legacy authentication protocols (LDAP, Kerberos, NTLM)." (Digital Identity Associate Manager, Sep 17, 2026) |
| [Microsoft](https://sumble.com/orgs/microsoft) | 44 | 28 | "…and credential theft, as well as strong knowledge of identity protocols (e.g., Kerberos, NTLM, LDAP, OAuth 2.0, OpenID Connect, SAML) and modern cloud identity architectures such as Entra ID." (Principal Security Research - Microsoft Defender ( Identity Threat Detection and Response), Sep 26, 2026) |
| [Fortinet](https://sumble.com/orgs/fortinet) | 44 | 4 | "Familiarity with authentication protocols and directory services such as Kerberos, NTLM, LDAP, RADIUS, SAML, or OAuth." (Embedded Software Developer, Oct 21, 2026) |
| [Tata Consultancy Services](https://sumble.com/orgs/tata-consultancy-services-tcs) | 43 | 8 | "NTLM hardening and mitigation of NTLM relay attacks" (Active Directory Security & Hardening Architect, Aug 19, 2026) |

## Is hiring for NTLM growing?

NTLM holds a steady place in hiring. 0.30 in every 10,000 job posts named it from June to August 2026, against 0.28 from March to May. From October to December 2025 it was 0.23.

| Month | Job posts naming it | All job posts | Per 10,000 job posts |
|---|---:|---:|---:|
| Oct 2025 | 19 | 1,413,673 | 0.13 |
| Nov 2025 | 53 | 1,822,119 | 0.29 |
| Dec 2025 | 29 | 1,236,103 | 0.23 |
| Jan 2026 | 42 | 1,828,002 | 0.23 |
| Feb 2026 | 50 | 1,856,647 | 0.27 |
| Mar 2026 | 51 | 1,850,711 | 0.28 |
| Apr 2026 | 60 | 1,728,886 | 0.35 |
| May 2026 | 39 | 1,821,509 | 0.21 |
| Jun 2026 | 40 | 1,909,496 | 0.21 |
| Jul 2026 | 68 | 1,815,180 | 0.37 |
| Aug 2026 | 61 | 1,835,698 | 0.33 |

## How many companies named NTLM in a job post for the first time in recent months?

In the three months to August 2026, 45 companies posted about NTLM for the first time. From March to May, 44 did. Of the 751 companies whose job posts name it, 6% first named it from June to August.

| Period | Companies naming it in a job post for the first time |
|---|---:|
| March to May 2026 | 44 |
| June to August 2026 | 45 |
| October 2025 to August 2026 | 148 |

Companies whose first job post naming it appeared in that period. Recruiters, staffing firms and job boards are left out.

## How do we know which companies use NTLM?

Job posts carry most of the evidence for NTLM: 66% of these companies name it in posts they wrote. 381 come from employees' profiles alone.

| How we know | Companies | Share |
|---|---:|---:|
| Job posts name NTLM | 751 | 66% |
| Employees' profiles list NTLM | 381 | 34% |

## What size are the companies that use NTLM?

32% of NTLM users are companies with 50 to 999 employees, and companies with more than 5,000 employees make up 31%, a high share for a tech page. 211 of its companies have fewer than 50 employees.

| Size | Share | Typical tech page |
|---|---:|---:|
| Under 50 employees | 19% | 22% |
| 50 to 999 | 32% | 38% |
| 1,000 to 5,000 | 18% | 17% |
| Over 5,000 | 31% | 23% |

## Where are NTLM companies based?

The United States dominates for NTLM, with 50.3% of the companies that use it. France is second, at 6.6%.

| Country | Companies | Share | Typical tech page |
|---|---:|---:|---:|
| United States | 537 | 50.3% | 43% |
| France | 70 | 6.6% | 4.6% |
| United Kingdom | 63 | 5.9% | 6.4% |
| India | 61 | 5.7% | 6.9% |
| Canada | 40 | 3.7% | 3.6% |
| Germany | 30 | 2.8% | 4.4% |

## Which teams work with NTLM?

No team dominates NTLM job posts. IAM comes first, at 17 companies. Information security and IT teams come next, at 12 companies each.

| Team | Companies |
|---|---:|
| IAM | 17 |
| Information security | 12 |
| IT | 12 |
| Cybersecurity | 9 |
| Active directory | 6 |
| Its | 6 |

## Which roles mention NTLM most?

Identity & Access Management (IAM) is the most common role, in 39% of job posts naming NTLM. The top four roles cover 53% of these job posts.

| Role | Share | Oct 2025 to Aug 2026 | Mar to May 2026 | Jun to Aug 2026 |
|---|---:|---:|---:|---:|
| Identity & Access Management (IAM) | 39% | 198 | 57 | 63 |
| Customer Engineer | 5.1% | 26 | 5 | 11 |
| IT Support | 4.5% | 23 | 5 | 7 |
| Systems Engineer | 4.3% | 22 | 4 | 8 |
| Software Engineer | 3.1% | 16 | 7 | 3 |
| Information Security Engineer | 2.7% | 14 | 5 | 1 |

## Which companies started naming NTLM in job posts recently?

Between April and August 2026, NTLM appeared for the first time in job posts at 66 companies: 25 commercial, 16 mid-market and 25 enterprise. NTT DATA, Inc. leads the new enterprise companies, with 5 job posts from April to August.

| Group | Company | Job posts, April to August 2026 |
|---|---|---:|
| Commercial | [ICterra Information and Communication Technologies](https://sumble.com/orgs/icterra) | 5 |
| Commercial | [VE3](https://sumble.com/orgs/ve3) | 3 |
| Commercial | [SCC Services Romania](https://sumble.com/orgs/scc-services-romania) | 2 |
| Commercial | [Alnafitha IT](https://sumble.com/orgs/alnafitha-it) | 2 |
| Commercial | [GDT - General Datatech](https://sumble.com/orgs/gdt) | 1 |
| Mid-market | [Pacific Life](https://sumble.com/orgs/pacific-life) | 2 |
| Mid-market | [NASA Jet Propulsion Laboratory](https://sumble.com/orgs/jet-propulsion-laboratory) | 2 |
| Mid-market | [Astek Inc](https://sumble.com/orgs/astek-940a357f) | 2 |
| Mid-market | [Eminevim](https://sumble.com/orgs/eminevim) | 2 |
| Mid-market | [N-iX](https://sumble.com/orgs/n-ix) | 2 |
| Enterprise | [NTT DATA, Inc.](https://sumble.com/orgs/ntt-global-data-centers-cbj1) | 5 |
| Enterprise | [EPAM Systems](https://sumble.com/orgs/epam-systems) | 4 |
| Enterprise | [Fujitsu](https://sumble.com/orgs/fujitsu) | 4 |
| Enterprise | [Intact](https://sumble.com/orgs/intact) | 4 |
| Enterprise | [ENGIE](https://sumble.com/orgs/engie) | 2 |

Companies that named NTLM in a job post for the first time between April and August 2026, ranked by their job posts in those months. AI-native companies get a group of their own, whatever their size. Recruiters and job boards are left out.

## What else do NTLM companies use?

The tool most tied to NTLM is Kerberos. 92% of NTLM companies use it, 52 times the usual rate for their size. Forescout comes second, 24 times as common as usual, at 7.4%.

| Tool | Companies | Also name it | Typical | Times as common |
|---|---:|---:|---:|---:|
| Kerberos | 299 | 92% | 1.8% | 52 times |
| Forescout | 24 | 7.4% | 0.3% | 24 times |
| IDA Pro | 17 | 5.2% | 0.24% | 22 times |
| Ghidra | 17 | 5.2% | 0.24% | 21 times |
| XSOAR | 25 | 7.7% | 0.36% | 21 times |
| Bluecoat | 18 | 5.5% | 0.26% | 21 times |
| Trellix | 57 | 18% | 0.89% | 20 times |
| McAfee | 42 | 13% | 0.74% | 17 times |

Shares are out of the 325 companies whose job posts name NTLM, not counting firms whose job posts name almost every technology.

## Which project themes come up in NTLM job posts?

402 job posts naming NTLM describe broad digital transformation, and 80 describe Security Infrastructure Modernization work. Data Infrastructure Migration is next, in 41 job posts.

| Project theme | Job posts |
|---|---:|
| Digital Transformation | 402 |
| Security Infrastructure Modernization | 80 |
| Data Infrastructure Migration | 41 |
| Cloud Migration | 35 |

- "Lead modernization initiatives involving NTLM, Kerberos, Conditional Access, SAML, OIDC, and SCIM" (Atmosera, Senior Identity Security Engineer (Remote - LATAM), Sep 12, 2026)

## About this data

Sumble built this page. Sumble gives sales, marketing and other GTM teams technographics and hiring signals for the companies they sell to: the technologies each company uses, which teams are hiring and for what, and who reports to whom. That helps a team know who to contact, why now, and what to say.

Sumble covers more than 3.6 million companies, 93 million job posts collected since 2022 and 194 million employee profiles, and tracks more than 37,000 technologies. It finds which technologies a company uses by reading its job posts and its employees' public profiles.

Sumble has a free plan, and the same data is available through its API and MCP server.

A company counts when its own job posts or its employees' public profiles name the technology. Hiring is that technology's share of all job posts collected each month. Quotes are copied word for word from the companies' job posts.

Every figure on this page comes from Sumble's own analysis, and you won't find it outside Sumble.