AD Architect

* AD AND SECURITY IS KEY


Cyderes (Cyber Defense and Response) is a pure-play, full life-cycle cybersecurity services provider with award-winning managed security services, identity and access management, and professional services designed to manage the cybersecurity risks of enterprise clients. We specialize in multi-technology, complex environments with the speed and agility needed to tackle the most advanced cyber threats. We leverage our global scale and decades of experience to accelerate our clients' cyber outcomes through a full lifecycle of cybersecurity services. We are a global company with operating centers in the United States, Canada, the United Kingdom, and India.



About the Job


The Active Directory Principal Architect is a customer-facing consultant responsible for implementing the technical deployments of AD solutions at Cyderes. They work on customer projects and programs, directly with the Engagement Lead and Project Manager to deliver outstanding solutions. They maintain a high-quality of work and delighting our clients.
The AD Architect should be an SME in Identity & Access Management. However, it would be beneficial to have a good amount of experience with Authentication and Entra ID. They will be responsible for leading the other consultants in technical direction and best working practices. When engaged directly with a customer they should take the lead in designing, developing, and managing the technical vision and implementation of Cyderes's projects and programs. This includes processes and performance against a technical plan. In addition, the AD Architect will be accountable for identifying efficiency-generating opportunities such as new architecture models, managed services options, and solutions that leverage customer success. Being the pinnacle of the technical expertise within the IAM practice the AD architect should feel comfortable being asked to assist pre-sales in talking to customers and presenting in front of C-Level stakeholders.


The successful candidate will have the opportunity to share their expertise with customers acting as a trusted advisor for topics within their professional services practice. As such, excellent English communication skills (both written and verbal) are a must. The candidate must also be capable of shifting smoothly between roles as an SME to technical lead as required. This role frequently involves investigating and resolving challenging technical problems, so demonstrated troubleshooting skills are required, along with effective organization skills, the ability to multi-task, and efficient time-management skills.



Responsibilities:


Converse with potential customers about AD or Authentication and be able to describe Cyderes' IAM & AD advisory, Professional Services and Managed Services offerings


Responsible for leading AD & Entra ID assessments and roadmap discussions with Cyderes' customers


Responsible for leading and creating technical IAM AD architectures for Cyderes' customers


Responsible for ensuring appropriate collection and analysis of technical requirements based on critical customer use cases and expectations


Responsible for generating customer delivery documentation such as technical requirement catalogs, deployment diagrams, and technical strategy presentations

• Provide planning, design, implementation, integration, and operational support for Microsoft Active Directory & Azure AD/Entra ID in a hybrid and multi-cloud environment.
• Understanding of current industry and Microsoft best practices for Microsoft identity products.
• Proven record of leading Microsoft identity architecture designs and capability of integrating designs into overall IAM strategy.
• Lead the analysis, deployments, and support for all IAM integration needs, including Microsoft Multi-Factor Authentication & Microsoft Single Sign On solutions.
• Ability to design and implement identity monitoring and proactively identify and remediate all the security risks and vulnerabilities to the Directory Services environment.
• Serve as a technical escalation engineer for all issues and needs related to hybrid/multi-cloud identity and directory service technologies.
• Be able to thoroughly research and come up with the required solutions and development of automation processes for the business needs.
• Be able to handle root cause analysis and problem management effectively for the IAM environment.
• Proactively identify areas of improvement, opportunities for innovations, and ways to enhance the IAM solutions and directory services environment.

• 10+ years' experience with AD/Azure AD/Entra ID in an enterprise mission-critical IT environment managing all identity and directory services needs and solutions
• 6+ years' experience with ADFS/Azure MFA/Single Sign on integrations
• Strong understanding of the entire identity Joiner/ Mover/ Leaver lifecycle
• Experience with the following Microsoft products and designs
  • Entra Identity Protection
  • Entra Identity Governance
  • Entra Password Protection
  • Entra MFA
  • Microsoft Defender for Identity
  • Microsoft 3-Tier Design and Red Forest deployments
  • Microsoft Credential Guard
  • LSA Protection Mode
  • Active Directory Protected User Groups
  • Entra ID for SSO
• Understanding of current attacks against Microsoft identity platforms and how to protect them
• It is helpful to have experience in conducting Active Directory consolidations and migrations.
• Strong background in Microsoft DNS and third-party DNS
• Ability to create PowerShell scripts for automation
• Strong experience in troubleshooting and solving IAM issues and integration needs in complex cloud environments.
• Excellent knowledge and experience in developing and maintaining standards and processes, proactively identifying and remediating issues/gaps in the IAM environment.
• Excellent communication, presentation, and customer relationship skills
• Experience working with cross-functional teams (Product Owners, Scrum Masters, Developers, Business Analysts).
• Desired certifications include exam MS-102 and SC-300