Senior Enterprise AD & Identity Architect

Visible Stars Company; Riyadh; On-site; SAR 280,000 - 420,000; Full time

Job summary

Visible Stars Company in Riyadh seeks a Senior Active Directory L3 Engineer to lead enterprise AD design, forests, domains, OU structures, and AD sites. You will oversee domain controllers lifecycle, migrations, and high-availability strategies.

Responsibilities include Core AD Services, GPO engineering, Identity & Access Management, Federation & SSO, Hybrid Identity with Entra ID, Conditional Access, MFA, and security hardening. Must have 8–12+ years and banking/regulatory familiarity.

Qualifications

• 8–12+ years of experience in Active Directory engineering and support.
• Strong expertise in AD architecture (multi-domain/forest environments).
• Hands-on experience with forest migrations and carve-outs (must-have).
• Deep knowledge of AD DS, DNS, replication, FSMO roles; GPO design and troubleshooting.

Responsibilities

• AD Architecture & Engineering: design, build, and manage AD forests, domains, and OU structures; define AD Sites, Subnets, and replication topology; manage domain controllers lifecycle; lead forest carve-out, consolidation, and migration initiatives; design high availability and disaster recovery strategies.
• Core AD Services: manage and troubleshoot AD DS, DNS (AD-integrated), DHCP (where applicable); handle replication issues, latency optimization, site link tuning; maintain FSMO roles and proper role placement.
• GPO Engineering: design, implement, optimize Group Policy strategy; troubleshoot inheritance, filtering, conflicts; implement security baselines using GPOs; manage GPO lifecycle (versioning, backup, rollback).
• Identity & Access Management: manage user/service account lifecycle; implement RBAC and least privilege models; integrate AD with enterprise IAM solutions; support LDAP, Kerberos, NTLM authentication mechanisms.
• Federation & SSO: design and manage Active Directory Federation Services; configure claims-based authentication; enable SSO across enterprise and third-party apps; troubleshoot federation, token, and claims issues.
• Hybrid Identity & Cloud Integration: integrate on-prem AD with Microsoft Entra ID; manage Entra Connect synchronization; implement Conditional Access, MFA, identity protection; support hybrid identity architecture and cloud authentication models.
• Security & Hardening: implement AD security best practices; PAM; AD hardening; monitor and respond to identity-based threats; support banking/regulatory compliance; periodic AD health checks and security assessments.
• Automation & Scripting: develop automation using PowerShell for AD operations; automate provisioning, reporting, monitoring; maintain scripts for audit/compliance.
• Monitoring, Audits & Compliance: monitor AD, ADFS, Entra ID health and performance; support audits and compliance reporting; maintain architecture docs/runbooks.
• L3 Support & Incident Management: act as escalation point for complex AD issues; RCA for critical incidents; ensure SLA adherence in high-availability banking environment.

Skills

AD Architecture

GPO design

RBAC

PowerShell

Identity & Access

Federation Services

Hybrid Identity

Entra ID

AD DS

Troubleshooting

Tools

Entra Connect

Job description

Visible Stars Company in Riyadh seeks a Senior Active Directory L3 Engineer to lead enterprise AD design, forests, domains, OU structures, and AD sites. You will oversee domain controllers lifecycle, migrations, and high-availability strategies.

Responsibilities include Core AD Services, GPO engineering, Identity & Access Management, Federation & SSO, Hybrid Identity with Entra ID, Conditional Access, MFA, and security hardening. Must have 8–12+ years and banking/regulatory familiarity.