Role Overview:This role is for an experienced Active Directory Architect responsible for the comprehensive design, implementation, and maintenance of enterprise-scale Microsoft Active Directory and Microsoft Entra ID (Azure AD) environments. The architect will focus on identity, authentication, federation, Public Key Infrastructure (PKI), and security, ensuring high availability and compliance.
Key Responsibilities:- Design, implement, and maintain enterprise-scale Microsoft Active Directory environments, including forest, domain, OU, and site architectures.
- Plan and execute domain consolidations, migrations, upgrades, and modernization initiatives.
- Define and maintain AD standards, governance, and security best practices, ensuring high availability and disaster recovery.
- Design and manage hybrid identity solutions integrating on-premises Active Directory with Microsoft Entra ID (Azure AD).
- Configure and maintain Azure AD Connect synchronization, Conditional Access Policies, Identity Protection, and Multi-Factor Authentication (MFA).
- Architect and manage Active Directory Federation Services (ADFS) and Single Sign-On (SSO) solutions, integrating third-party applications.
- Design and administer Microsoft Certificate Services (AD CS) and enterprise Public Key Infrastructure (PKI).
- Design, implement, and maintain Group Policy Objects (GPOs), security baselines, and troubleshoot processing issues.
- Design and manage Microsoft Key Management Services (KMS) for software activation.
- Implement and maintain Microsoft System Center Operations Manager (SCOM) for Active Directory monitoring.
- Design and manage Microsoft IPAM infrastructure, including DNS and DHCP integration.
- Design and manage enterprise print infrastructure and implement printer deployments through Group Policies.
- Implement Active Directory security controls, conduct reviews, and support compliance initiatives (SOX, NERC, HIPAA).
- Develop automation solutions using PowerShell for administrative, monitoring, and reporting tasks.
- Maintain architecture diagrams, technical documentation, and participate in change management.
Required Skills:- MS Active Directory (AD)
- Azure Active Directory (Azure AD) / Microsoft Entra ID
- Microsoft Certificate Services (AD CS) / PKI
- Microsoft ADFS (Active Directory Federation Services)
- Azure SSO (Single Sign-On)
- Active Directory Monitor System (SCOM)
- KMS (Key Management Services)
- Group Policy Management (GPOs)
- IP Address Management (IPAM)
- PowerShell scripting
- SAML, OAuth, OpenID Connect, WS-Federation protocols
Qualifications:- 12-15+ years of experience in Active Directory architecture and design.
