Role & responsibilities The Active Directory Architect , is expected to be a subject matter expert that will have global responsibility for the design, configuration and maintenance of the Identity/Active Directory environment. The key responsibilities include Work with stakeholders in different geographies to collect business and technical requirements and support design / delivery of enterprise level solutions. Own and lead technical discussions in solution implementations, upgrades, enhancement and conversions. Evaluate new applications/technologies, conduct proof of concepts (POCs), and make recommendations for integrating innovative solutions to drive efficiency and productivity. Design and support improvement of the current AD landscape and future demands Support operation of authentication and authorization solution for internal and cloud solutions including Azure Active Directory/Microsoft EntraID Provide Solutions to integrate the authentication and authorization of internal and cloud solutions. Collaborate with Governance, Risk and Compliance to mitigate vulnerabilities, define and implement security policies and baseline standards. Continually improve processes through automation using PowerShell or other scripting languages to optimize, clean-up, and secure the Active Directory platform Provide guidance in Troubleshooting and resolving Active Directory, GPO, and password/identity management systems. Create and update technical documentation of operating procedures as needed. Oversee the architecture and design of the global backup and recovery of Active Directory. Establish/recommend policies on system use and services. Act as technical escalation point for major incidents Required Skills/Experience Must possess 10+ years of proven experience with Directory Services Infrastructure architect/design/support), working with a large enterprise distributed computing environment. Strong understanding of architecting and configuring AD Forests, Domains, Trusts, DNS, DHCP, Group Policy & Organizational Units and authentication protocols like SAML and OAuth/OIDC Proven expertise in designing and architecting Azure AD/EntraID. Should have a strong working knowledge of AD Connect Proven experience in security and compliance for both on premise and azure cloud especially in identity and collaboration services. Proven experience in Active directory Certificate services. Proven experience in Active Directory Federation Services. Experience in Active Directory sites and services, AD Recycle Bin, Disaster Recovery, AD Backup and recovery etc. Experience in domain controller metadata cleanup of failed servers in the domain/forest. Through understanding of change, incident, and problem management processes. Able to resolve highly complex technical problems at the enterprise level. Excellent communication, collaboration, and negotiation skills to effectively serve as a leader and evangelist across the enterprise. Preferred candidate profile