Description

Lead the design, implementation, and governance of enterprise-scale Active Directory and Windows Server infrastructure. Own multi-domain architecture, hybrid identity integration with Azure AD, and security hardening for large environments.

Responsibilities

• Architect multi-domain and multi-site Active Directory structures, including domain/forest design, OU models, and replication topology.
• Define and enforce AD governance standards, Group Policy frameworks, naming conventions, and delegation models.
• Design hybrid identity solutions integrating on-prem Active Directory with Azure AD, managing Azure AD Connect, ADFS, and Conditional Access policies.
• Implement identity security posture improvements using Microsoft Entra ID Protection, MFA, and Zero Trust principles.
• Develop automation frameworks using PowerShell and DSC to optimize AD performance, user provisioning, and configuration management.

Required Skills

• 8+ years of experience architecting Active Directory in large enterprise environments.
• Deep expertise in Domain and Forest architecture design and Group Policy architecture.
• Strong knowledge of DNS and DHCP services in complex network environments.
• Proven experience with Azure AD and hybrid identity federation models.
• Advanced PowerShell scripting and automation skills.
• Solid understanding of networking concepts including TCP/IP, routing, and firewalls.
• Experience with Windows Server infrastructure security hardening and compliance audits.

Preferred Skills

• Familiarity with Identity and Access Management (IAM) frameworks and Zero Trust security architectures.
• Experience leading technical workshops and architecture reviews with cross-functional teams.

Key Skills

Education

Any Graduate