Active Directory Infrastructure Architect

We are looking for a highly experienced and hands-on Active Directory Infrastructure Architect to drive the transformation of our identity and infrastructure services. The successful candidate will architect and implement enterprise-grade solutions, ensuring security, compliance, and efficient operations. This role is critical in defining the target-state architecture and leading the migration process, while also providing technical leadership and support.

• Design and architect enterprise Active Directory solutions, including target-state architecture for AD, DNS, and DHCP environments.
• Lead end-to-end migration projects for Active Directory Forests, Domains, Domain Controllers, DNS, and DHCP services.
• Implement Microsoft security best practices and strengthen identity security through privileged access management.
• Conduct AD health assessments, security audits, and ensure compliance with organizational and regulatory standards.
• Provide Level 3 support and troubleshoot complex infrastructure issues, optimizing performance and scalability.
• Collaborate with cross-functional teams and present architectural recommendations to leadership and stakeholders.
• Lead technical workshops, knowledge transfer sessions, and maintain architecture diagrams and design documents.
• Implement monitoring, alerting, backup, and disaster recovery processes for directory services.
• Stay updated with industry trends and technologies, and drive innovation within the Active Directory infrastructure.
• Ensure a smooth and efficient migration process with minimal business disruption during cutover activities.

• Bachelor's degree in Computer Science, IT, Engineering, or a related field.
• 10-15 years of experience in Microsoft Infrastructure and Identity Management, with a minimum of 7+ years in enterprise Active Directory design and architecture.
• Proven track record in leading large-scale AD, DNS, and DHCP migration projects.
• Strong PowerShell scripting and automation skills.
• Expertise in Microsoft Entra ID, Azure AD Connect, Hybrid Identity Solutions, SSO, and MFA.
• Experience in Active Directory Migration, Forest/Domain Consolidation, and Domain Controller Upgrade/Migration.
• Knowledge of Active Directory Security Hardening, Privileged Access Management, and Identity Governance.
• Familiarity with ITIL Foundation practices is preferred.
• Excellent problem-solving, stakeholder management, and communication skills.
• Ability to work independently and lead a team effectively.