16 years of relevant experience (education and work combined)
Bachelor's degree in Computer Science, IT, Engineering, or related field
7+ years in enterprise Windows Server environments
Deep expertise in Microsoft technologies including Windows Server and Active Directory
Responsibilities
Define and maintain enterprise architecture standards for Microsoft technologies
Develop technology roadmaps and modernization strategies
Lead architecture reviews and solution design efforts
Serve as the primary Microsoft infrastructure SME for planning and stakeholder engagements
Design and support highly available Microsoft on-prem solutions
Create detailed architectural documentation and operational standards
Implement security best practices and lead vulnerability remediation initiatives
Benefits
Opportunity to lead strategic technology decisions
Engage in complex, highly secure enterprise environments
Collaborate with cross-functional teams
Mentorship opportunities for engineering teams
Involvement in large-scale infrastructure transformation programs
Full Job Description
We are seeking a Microsoft Solutions Architect to lead the design, modernization, security, and automation of enterprise on-prem Microsoft infrastructure. This role serves as the technical authority for Windows Server and Active Directory architecture, driving strategic technology decisions, engineering standards, and long-term infrastructure roadmaps.
The ideal candidate combines deep technical expertise with strong leadership skills and thrives in complex, highly secure enterprise environments.
Responsibilities
Architecture & Strategy
Define and maintain enterprise architecture standards for Microsoft technologies
Develop technology roadmaps, modernization strategies, and future-state designs
Lead architecture reviews, technical evaluations, and solution design efforts
Serve as the primary Microsoft infrastructure SME for technical planning and stakeholder engagements
Infrastructure Engineering
Design, implement, and support highly available Microsoft on-prem solutions, including:
Active Directory Domain Services (AD DS)
Windows Server
DNS, DHCP, Group Policy, and Kerberos
PKI/AD CS
File, storage, and remote desktop services
Design delegated administration, RBAC, and identity management solutions
Create detailed architectural documentation, implementation plans, and operational standards
Automation & Security
Develop automation solutions using PowerShell and modern infrastructure automation tools
Implement security best practices, privileged access controls, and DISA STIG compliance
Lead vulnerability remediation, system hardening, and infrastructure security initiatives
Technical Leadership
Troubleshoot and resolve complex infrastructure and performance issues
Perform root cause analysis and drive continuous improvement
Lead technical projects through the full system lifecycle and mentor engineering teams
Collaborate with security, network, application, and operations teams to deliver enterprise solutions
Requirements
TS/SCI CI Poly Clearance
16 years of experience that can be a combination of work history and education. This equates to a Doctorate and 8 years, master's and 10 years, bachelor's and 12 years, associates and 14 years or HS diploma and 16 years.
Bachelor's degree in Computer Science, Information Technology, Engineering, or related field (or equivalent experience)
7+ years designing and supporting enterprise Windows Server environments
Technical Expertise
Deep expertise in:
Windows Server
Active Directory
Group Policy
DNS and DHCP
PKI/AD CS
Enterprise identity and access management
High-availability and clustering technologies
Experience with Active Directory architecture, delegated administration, and RBAC design
Advanced PowerShell scripting and infrastructure automation experience
Experience with enterprise patch management, configuration management, and deployment automation
Strong understanding of Microsoft security best practices, DISA STIGs, least-privilege access, and vulnerability remediation
Experience with VMware, Hyper-V, or comparable virtualization platforms
Strong knowledge of networking fundamentals, including TCP/IP, DNS, VLANs, firewalls, and network segmentation
Proven ability to troubleshoot complex Windows, networking, virtualization, and storage environments
Compliance with Department of Defense (DoD) 8140 Information Assurance Technical (IAT) Level 2
Professional Skills
Strong analytical and problem-solving abilities
Excellent communication and technical documentation skills
Ability to lead complex technical initiatives and work independently in a fast-paced environment
Desired Qualifications
Experience with multi-site and geographically distributed Active Directory environments
Experience with domain consolidations, migrations, and infrastructure modernization initiatives
Experience with Ansible, Terraform, or similar automation platforms
Experience with VDI, FSLogix, DEM, and enterprise desktop engineering
Experience integrating Windows and Red Hat Enterprise Linux environments
Experience with enterprise backup, disaster recovery, and business continuity solutions
Knowledge of Zero Trust architecture and cybersecurity frameworks
Experience leading architecture reviews, proof-of-concept efforts, and large-scale infrastructure transformation programs
Experience working in highly regulated enterprise or government environments