Senior Active Directory Architect & IAM Lead

Stefanini North America and APAC; Philippines; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Stefanini North America and APAC is seeking an experienced Active Directory lead to design, implement, and manage complex AD environments across on-premises and cloud. You will enforce GPOs, lead migrations, and collaborate with InfoSec for RBAC and security baselines.

The role focuses on hybrid identity solutions including Azure AD Connect and ADFS, with strong emphasis on documentation and mentoring of junior engineers.

Qualifications

• 7+ years hands-on experience with Microsoft Active Directory in a large-scale enterprise.
• Expertise in ADDS, DNS, DHCP, DFS, and GPO management.
• Strong knowledge of Kerberos, LDAP, NTLM and authentication mechanisms.
• Experience with hybrid cloud environments and identity federation.
• Microsoft certifications strongly preferred (ID Admin Associate, MCSE).

Responsibilities

• Serve as technical expert and escalation point for AD incidents and requests.
• Design, implement, and manage complex AD environments including forests, trusts, and replication.
• Maintain and enforce GPOs with auditing and lifecycle management.
• Ensure security/compliance of AD environments through reviews, hardening, and monitoring.
• Lead AD upgrades, migrations, and DR planning.
• Mentor junior team members and provide knowledge sharing.
• Collaborate with InfoSec/IAM to implement RBAC and security baselines.
• Support Azure AD Connect and ADFS hybrid identity solutions.
• Document architecture and operational procedures.

Skills

RBAC

Privileged identity management

Azure AD integration

PowerShell scripting

Azure CLI

DNS management

AD health monitoring tools

Azure AD Connect

Education

Microsoft Certified: Identity and Access Administrator Associate

MCSE

Tools

Azure AD Connect

Quest Change Auditor

AD health monitoring tools

Job description

Stefanini North America and APAC is seeking an experienced Active Directory lead to design, implement, and manage complex AD environments across on-premises and cloud. You will enforce GPOs, lead migrations, and collaborate with InfoSec for RBAC and security baselines.

The role focuses on hybrid identity solutions including Azure AD Connect and ADFS, with strong emphasis on documentation and mentoring of junior engineers.