Active Directory Architect

Key Responsibilities

• Active Directory Architecture & Creation, 9-18 years of experience in IT Services & Consulting industry with expertise in Active Directory.

• Design greenfield Active Directory forest and domain structures.

• Define organizational unit (OU) hierarchies and inheritance models.

• Establish secure multi-forest trust relationships and replication topologies.

• Create hardened Group Policy Object (GPO) frameworks from scratch.

• Architect Tiered Administration Models to isolate high-privilege credentials.

• Develop disaster recovery, backup, and authoritative restore procedures.

Entra ID & Hybrid Integration.

• Configure Microsoft Entra Connect for hybrid identity synchronization.
• Implement Microsoft Entra ID governance, including Privileged Identity Management (PIM).
• Design Conditional Access policies to enforce modern Zero Trust principles.
• Manage hybrid Azure AD join configurations for corporate devices.
• Optimize single sign-on (SSO) and multi-factor authentication (MFA) workflows. Required Skills & Qualifications

Primary Technical Skills.

• Expertise in Active Directory Domain Services (AD DS) architecture.
• Proficiency in Active Directory Certificate Services (AD CS) and PKI.
• Mastery of DNS, Kerberos, NTLM, and LDAP protocols. Experience leading large-scale AD consolidation or migration projects.
• Advanced PowerShell scripting skills for identity lifecycle automation.
• Experience managing Microsoft Entra ID (formerly Azure AD) tenants.
• Knowledge of Entra ID Application Proxy and Enterprise Applications. Familiarity with identity federation tools like ADFS or PingFederate.