Senior Active Directory Architect

About the Opportunity
A cybersecurity-focused technology firm operating at the intersection of enterprise infrastructure and identity governance, we specialize in designing, securing, and scaling mission-critical Active Directory environments for Fortune 500 and public sector clients across the United States. Our architects lead zero-trust transformations, automate identity lifecycle management, and harden domain environments against evolving threat landscapes using Microsoft’s modern identity stack.

Role & Responsibilities

• Architect and deploy scalable, hybrid Active Directory environments integrating on-prem AD with Azure AD, Entra ID, and Microsoft 365 services.
• Design and implement secure group policy objects (GPOs), domain trust models, OU structures, and delegated administration frameworks.
• Lead AD migration, consolidation, and modernization projects—upgrading forests, domains, and schemas while ensuring minimal service disruption.
• Enforce zero-trust principles by integrating conditional access, MFA, JIT privileged access, and PAM solutions with AD infrastructure.
• Automate AD provisioning, user lifecycle management, and compliance reporting using PowerShell, Azure Automation, or Ansible.
• Conduct AD health audits, performance tuning, and security hardening—mitigating vulnerabilities like Pass-the-Hash, DCShadow, and golden ticket attacks.

Skills & Qualifications

• Must-Have
• Active Directory
• Azure AD
• Entra ID
• PowerShell
• Group Policy
• Microsoft 365
• AD FS
• Windows Server
• Preferred
• Azure Automation
• Ansible
• CyberArk

Benefits & Culture Highlights

• Hybrid work model with flexibility to work remotely or from regional US offices.
• Access to cutting-edge Microsoft security tools and paid certification sponsorships.
• Direct impact on securing enterprise-grade identity infrastructure for top-tier clients.