Directory Services Ad Engineering Solutions Architect

Summary

Join our team as an experienced Active Directory (AD) and Entra ID engineer! This 6-month remote contract opportunity requires a strong background in designing, building, and maintaining large-scale global identity directory services. You will conduct high-level project design, review disaster recovery plans, engineer and support AD & Entra ID tools, and provide technical leadership. The ideal candidate possesses 5-7 years of experience in a large, global enterprise, along with expertise in various AD and Entra ID technologies. A bachelor's degree and cybersecurity certifications are required.

Requirements

• Senior and experienced AD and Entra ID Engineer (5-7 years) with Large, Global Enterprise Experience
• 5+ years’ experience in directory services solution architecting
• Ability to architect solutions around the following technologies and tools; Domain Controller Roles (GCS, Operational Masters, etc.)
• Forest and Domain Design
• DNS Infrastructure
• OU Design
• Site Topology, Replication and Knowledge Consistency Checking
• Trusts (Transitive and Non-Transitive)
• Group Policy Management
• Sites & Services
• AD Certificate Services
• AD replication, SYSVOL, GPO, DNS, Digital Certificate, LDAP, Kerberos, Federation, AD Connect and NTP
• Recovery
• Domain Controller migrations
• AD Domain Services
• Directory Hardening
• ADFS
• Logging and Monitoring
• Good understanding of AD / Entra ID Security
• AD Support: Extensive experience in supporting and troubleshooting on-prem Active Directory services (Authentication, DFS, GPO, LDAP)
• AD Security: Good understanding of AD security, vulnerabilities, and common safeguards
• Tier-0 Security: Specific understanding of Tier-0 and identifying its security boundaries
• Domain Consolidation: Experience or enhanced understanding of consolidating a large enterprise AD forest
• Cloud Interface: Familiar working with the AWS EC2 and Azure environments to build and support services
• Bachelor's degree (BA/BS) from four-year college or university; or equivalent training, education, and work experience
• Cybersecurity certifications such as CISSP, CISM, etc

Responsibilities

• Conduct high level project and product design and create project charters
• Review global directory services disaster recovery plans for gaps and define next steps
• Engineer, deploy, operationalize, maintain, and support tools associated with AD & Entra ID
• Contribute to the engineering configuration and support of AD & Entra ID as needed
• Communicate service enhancements and operational efficiency directions, features and roadmaps aligned to the roadmap
• Providing technical leadership to others with less knowledge or experience
• Liaise with, train, and support operational teams
• Assist in technology evaluations and guiding proof of concepts
• Participate in solution design discussions
• Architect and assist in engineering global AD domain consolidation project(s)

Preferred Qualifications

• Excellent interpersonal communication skills with strong spoken and written English
• Collaborative team worker – both in person and virtually using MS Teams or similar
• Excellent analytical skills
• Organizational skills with attention to detail
• Ability to leverage existing documentation
• Excellent documentation skills; demonstrated proficiency in Microsoft Office including Word, Excel and PowerPoint
• Business outcomes mindset
• Solid balance of strategic thinking with detail orientation
• Self-starter, ability to take initiative
• Flexibility to accommodate working across different time-zones

Benefits

• Remote work
• Travel: Up to 10%