Senior AD Architect - Hybrid Identity & Entra Lead

SYNLAB Vet; Barcelona; Híbrido; EUR 90.000 - 130.000; Jornada completa

Descripción de la vacante

SYNLAB Vet is seeking a Senior Active Directory Architect to lead the design, modernization, and standardization of directory services in a complex hybrid enterprise. You will shape the target AD architecture, integrate with Microsoft Entra ID, and drive scalable, secure identity across multiple countries.

The role combines architectural leadership with hands‑on expertise to remediate legacy issues, improve identity stability, and ensure reliable directory synchronization with Entra ID and

Formación

• Strong experience designing and operating enterprise Active Directory environments.
• Experience working in large, complex AD environments (multiple domains, trusts, or distributed environments).
• Deep knowledge of AD domain architecture, OU structure and delegation models, Group Policy architecture, authentication and identity security.
• Ability to analyze legacy environments and define practical remediations.
• Deep knowledge of directory synchronization (Entra ID Connect/Cloud Sync).
• Solid understanding of Microsoft Entra ID administration beyond synchronization, including authentication methods, hybrid identity design, and identity‑related access controls.
• Experience with Exchange hybrid identity dependencies, including recipient‑related Active Directory attributes and operational considerations.
• Good understanding of identity dependencies for Microsoft Intune and Entra‑joined / hybrid‑joined devices.
• Experience with identity lifecycle automation and provisioning flows across HR systems, Active Directory, and Microsoft Entra ID.
• Strong troubleshooting capabilities in complex identity infrastructures.

Responsabilidades

• Assess and document the current Active Directory landscape across environments.
• Define and implement target architecture and standards for Active Directory.
• Improve OU structures, delegation models, tiering, and Group Policy design.
• Address architectural inconsistencies and legacy configuration issues.
• Lead remediation of architectural weaknesses, security findings, and legacy AD issues.
• Troubleshoot complex directory and authentication issues across domains and hybrid environments.
• Drive improvements in directory design, authentication, and operational resilience.
• Strengthen Active Directory resiliency, recovery preparedness, and restore processes.
• Ensure reliable integration between AD and Microsoft Entra ID.
• Support and improve directory synchronization architecture, troubleshooting, and operational stability.
• Contribute to standards for authentication, administration, and lifecycle processes across hybrid identity.
• Provide architectural input into identity dependencies across Microsoft 365, particularly Entra ID, Exchange hybrid, and endpoint identity integration with Intune.
• Support design decisions affecting access, device identity, and cloud‑connected provisioning.
• Act as the technical authority for Active Directory within the Workplace team.
• Provide technical guidance to the team.
• Support identity‑related architectural decisions across infrastructure projects.
• Work closely with infrastructure and application teams across the organization.
• Align directory and hybrid identity design with broader infrastructure and security initiatives.
• Support technical workshops and coordination with country IT teams where required.

Conocimientos

Active Directory design

Hybrid identity

Entra ID

Group Policy

Directory synchronization

Exchange hybrid

Intune integration

Identity governance

Troubleshooting

Technical leadership

Descripción del empleo

SYNLAB Vet is seeking a Senior Active Directory Architect to lead the design, modernization, and standardization of directory services in a complex hybrid enterprise. You will shape the target AD architecture, integrate with Microsoft Entra ID, and drive scalable, secure identity across multiple countries.

The role combines architectural leadership with hands‑on expertise to remediate legacy issues, improve identity stability, and ensure reliable directory synchronization with Entra ID and