Active Directory Architect

About the Role We’re seeking an experienced Active Directory Engineer to design, secure, and maintain our enterprise directory infrastructure. The ideal candidate will have deep expertise in Active Directory and Azure AD , with additional experience integrating and managing Okta for single sign‑on (SSO) and identity federation. You will be responsible for ensuring directory health, automating administrative functions, and advancing our hybrid identity and access strategy. Key Responsibilities Design, deploy, and maintain Active Directory forests, domains, and Group Policy Objects (GPOs) . Manage domain controllers , DNS , DHCP , FSMO roles , AD replication , and trust relationships . Implement and maintain Azure AD synchronization and hybrid identity solutions. Integrate Okta with Active Directory for SSO, MFA, and lifecycle management. Develop and maintain PowerShell scripts to automate user provisioning, group management, and reporting. Conduct regular AD health checks , resolve replication and authentication issues, and ensure high availability. Apply security best practices, including auditing, privileged access controls, and zero‑trust principles. Support identity lifecycle processes — joiners, movers, leavers, and access reviews. Collaborate with Cybersecurity and Infrastructure teams to strengthen directory hardening and compliance posture. Maintain documentation, architecture diagrams, and operational runbooks for AD and IAM systems. Required Qualifications Bachelor’s degree in Computer Science, Information Systems, or related field (or equivalent experience). 5+ years of experience designing and supporting Active Directory and Azure Active Directory in enterprise environments. Strong understanding of AD architecture , LDAP , Kerberos , and Group Policy . Hands‑on experience with Okta , Azure AD Connect , and Entra ID . Strong scripting and automation skills in PowerShell (required). Working knowledge of identity and access management (IAM) , including SSO , MFA , and RBAC . Experience troubleshooting complex authentication and directory synchronization issues. Preferred Qualifications Microsoft Certified: Identity and Access Administrator or Windows Server Hybrid Administrator Associate . Okta Certified Professional or Administrator certification. Experience with Privileged Access Management (PAM) solutions (CyberArk, BeyondTrust, etc.). Familiarity with PKI , certificate management , and secure LDAP . Understanding of Zero Trust and identity governance frameworks. Experience with AD disaster recovery , backups , and domain migrations . Soft Skills Strong analytical and problem‑solving abilities. Excellent written and verbal communication skills. Highly organized with attention to detail. Collaborative mindset and ability to work across infrastructure and security teams. Pay Range $150,000.00/yr - $160,000.00/yr Seniority level Mid‑Senior level Employment type Full‑time Job function Information Technology Industries Staffing and Recruiting Benefits Medical insurance, 401(k) #J-18808-Ljbffr Clark Davis Associates