Active Directory Architect

Position summary

Key responsibilities

• Lead enterprise Active Directory architecture and solution design; design forest/domain architecture, sites and services, trusts, and replication topology.
• Define Group Policy strategy, OU structures, DNS/DHCP/PKI integration, privileged access, administrative tiering, and delegation models.
• Design high availability, resilience, backup, disaster recovery, domain controller placement, FSMO role strategy, and replication architecture.
• Design and support hybrid identity integration with Microsoft Entra ID and Azure AD Connect.
• Define security hardening, access controls, and technical standards; develop and maintain HLD and LLD documentation.
• Evaluate directory and identity technologies; guide Windows Server and identity engineering teams.
• Lead architecture, security, and resilience reviews; troubleshoot complex directory, authentication, and identity issues.
• Review implementations for alignment with approved architecture and security standards.

Technical requirements

• Strong AD DS experience and knowledge of forest/domain architecture, sites and services, replication, trusts, and FSMO roles.
• Experience with GPO and OU design; strong knowledge of DNS, DHCP, and PKI integration.
• Experience with privileged-access and administrative tiering models; strong hybrid identity experience, including Entra ID and Azure AD Connect.
• Knowledge of federation and enterprise authentication; experience with AD backup, recovery, resilience, and disaster recovery.
• Strong Windows Server knowledge; PowerShell scripting and automation experience; AD security hardening and delegation experience.
• Experience producing HLDs, LLDs, architecture diagrams, and technical standards; strong troubleshooting and problem-solving skills.

Qualifications and experience

• Bachelor's degree in computer science, information technology, engineering, or a related field.
• 6+ years of relevant experience, including at least 2+ years in Active Directory Architecture or a similar role.
• Microsoft identity or Windows Server certification and ITIL 4 Foundation are preferred; security or identity architecture certifications are an advantage.
• Strong technical leadership, team collaboration, communication, and stakeholder-management skills.

Key skills

• Active Directory, AD DS, Entra ID, Azure AD Connect, Group Policy, OU design, DNS, DHCP, PKI, forest and domain design, sites and services, FSMO, AD replication, hybrid identity, PowerShell, AD security, HA/DR, and HLD/LLD.