AD Architect

Job Summary:

Active Directory Architect/Engineer

• Design & Architecture:

  Develop and maintain the

  Active Directory architecture

  , including

  domain controllers, trusts, and replication topology

  .



• Implementation & Management:

  Manage

  user and group administration, Group Policy Objects (GPOs), security configurations,

  and AD infrastructure.



• Security & Compliance:

  Conduct

  regular audits, vulnerability assessments, and security policy enforcement

  to ensure compliance with industry standards.



• Integration:

  Integrate AD with

  cloud services, identity management platforms (e.g., Azure AD, Okta), and third-party applications

  .



• Troubleshooting & Support:

  Provide advanced

  troubleshooting, performance tuning, and disaster recovery planning

  for AD-related issues.



• Documentation & Training:

  Maintain

  comprehensive documentation

  for AD processes and provide

  training to IT teams

  on best practices.

• Education:

  Bachelors degree in

  Computer Science, Information Technology, Cybersecurity

  , or a related field.



• Technical Expertise:

  
  
  
  

  • Strong knowledge of Active Directory, DNS, DHCP, and Group Policy

    .
  
  
  • Experience in

    domain controller configuration, replication, and trust relationships

    .
  
  
  • Proficiency in

    PowerShell scripting

    for automation and administration.
  
  
  • Familiarity with

    IAM solutions, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Kerberos authentication

    .
  
  
  • Experience with

    cloud-based directory services (Azure AD, AWS IAM)

    .
  
  
  
  



• Security & Compliance:

  
  
  
  
  • Knowledge of

    security best practices, auditing, and regulatory compliance

    (e.g.,

    NIST, ISO 27001

    ).
  
  
  • Experience with

    AD security hardening, access control, and role-based access management (RBAC)

    .
  
  
  
  

• Certifications:

  Microsoft Certified: Identity and Access Administrator Associate, MCSE: Core Infrastructure, CISSP, or equivalent.


• Experience with

  hybrid cloud AD environments

  and migration strategies.


• Familiarity with

  Zero Trust security models

  and modern IAM frameworks.