Description

You will lead Active Directory architecture design for the DC Exit program, ensuring hybrid identity continuity and resilient cloud deployment.

This role is on-site.

Responsibilities

• Deploy and optimize AD Domain Controllers on AWS EC2 with multi-AZ design and resilient topology.
• Create AD integration models for migrated Java, .NET, Oracle Exadata, and TIBCO workloads.
• Develop SAML/SSO and MFA authentication models for cloud-hosted applications and define trust models.
• Build automation using Terraform, Ansible, and PowerShell for provisioning and configuration.
• Provide runbooks, topology diagrams, HLD/LLD, and operational transition guidelines.

Required Skills

• 9+ years of experience in enterprise architecture and identity management.
• Strong expertise in Microsoft Active Directory, multi-site design, FSMO roles, replication, and DNS integration.
• Hands-on experience deploying AD Domain Controllers on AWS EC2 with proper site/subnet design.
• Knowledge of AWS networking for identity: VPC, routing, security groups, DX/VPN/TGW.
• Experience integrating AD with AWS IAM, SAML providers, and MFA for cloud workloads.
• Strong understanding of SAML, identity federation, and MFA enforcement for cloud applications.
• Proficiency in automation using Terraform, Ansible, and PowerShell for AD operations.
• Knowledge of Windows Server 2016–2025 and AD integration for RHEL 7–9 systems.

Preferred Skills

• Experience supporting AD needs for Java/.NET apps, Oracle/SQL DBs, and TIBCO integrations.
• Skilled in GPOs, OU structures, certificate services, and security hardening standards.
• Ability to troubleshoot authentication issues, replication delays, and hybrid identity failures.

Key Skills

Education

Any Gradute