Senior Architect I - Remote

Active Directory Domain Controller Project
We are seeking a highly experienced Senior Active Directory Infrastructure Architect/SME to lead and provide Subject Matter Expertise for a large-scale Active Directory modernization initiative supporting a federal enterprise environment. This consultant will guide the upgrade and migration of six (6) Active Directory Domain Controllers from Windows Server 2012 R2 to Windows Server 2025 while transforming the environment into a secure hybrid architecture spanning on-premises infrastructure and Microsoft Azure IaaS. The selected professional will serve as the technical lead and trusted advisor throughout the project lifecycle, providing architecture, migration strategy, validation, documentation, and knowledge transfer. All work will be performed remotely in partnership with customer technical teams who will execute hands-on implementation activities under SME guidance.
Conduct comprehensive assessments of existing Active Directory environments, including forests, domains, trusts, sites, replication, DNS, DHCP, GPOs, and PKI integrations.
Identify technical dependencies, legacy application constraints, security risks, and migration challenges.
Develop migration strategies, implementation roadmaps, rollback plans, and maintenance window schedules.
Lead stakeholder workshops with infrastructure, security, networking, and application teams.

Design modern hybrid Active Directory architectures leveraging both on-premises and Microsoft Azure IaaS domain controllers.
Develop AD site topology, replication strategies, DNS architecture, and network integration designs.
Define Azure deployment architecture including virtual networks, subnets, resource groups, NSGs, and hybrid connectivity models.
Establish security baselines, hardening standards, auditing, monitoring, and compliance requirements.

Provide technical leadership for Windows Server 2025 Domain Controller deployment and promotion.
Validate authentication services, Group Policy processing, replication health, and DNS functionality throughout migration activities.

Plan and oversee the retirement of Windows Server 2012 R2 Domain Controllers.
Guide demotion procedures, metadata cleanup, DNS cleanup, and post-migration validation activities.
Develop architecture diagrams, operational runbooks, migration procedures, and as-built documentation.
Conduct final validation testing and health assessments.
Deliver knowledge transfer sessions and operational recommendations to customer stakeholders.
10+ years of enterprise Active Directory administration, engineering, and architecture experience.

• Windows Server 2012 R2, 2016, 2019, 2022, and 2025
• DNS, DHCP, Group Policy, PKI, and AD replication
• Active Directory Sites and Services
• Hybrid identity and Microsoft Azure infrastructure

Backup, disaster recovery, and rollback planning
Enterprise networking concepts, VPNs, ExpressRoute, routing, and firewalls

Experience leading enterprise infrastructure modernization and migration projects.
Microsoft certifications related to Azure, Windows Server, or Identity Management.
Experience integrating Active Directory with SIEM, monitoring, and logging platforms.