Active Directory Architect

StratEdge IT Consulting INC; Florida; On-site; USD 137,760,000 - 172,200,000; Full time

Job summary

StratEdge IT Consulting INC in Palm Beach Gardens, FL seeks an experienced Active Directory Architect to design and migrate enterprise AD environments for a major client (TCS). This role focuses on forest/domain design, hybrid identity, and secure access across on-prem and cloud platforms.

You will lead governance, DR planning, and automation using PowerShell, while coordinating with security and operations teams to ensure compliance and high availability.

Qualifications

• 12-15+ years of enterprise AD experience desired.
• Strong background in Microsoft Entra ID and hybrid identity governance.
• Proven ability to design secure AD architectures, including PKI and SSO solutions.

Responsibilities

• Design, implement, and maintain enterprise-scale Microsoft Active Directory environments.
• Develop AD forest, domain, OU, and site architectures.
• Plan domain consolidations, migrations, upgrades, and modernization initiatives.
• Define AD standards, governance, and security best practices.
• Ensure high availability, DR, and BC for AD services.
• Design and manage hybrid identity with Entra ID; configure AD Connect.

Skills

Architecture & design

Hybrid identity & SSO

Security & compliance

Automation & scripting

Vendor coordination

Tools

Microsoft Active Directory

Azure AD

AD CS

ADFS

Azure SSO

SCOM

KMS

Group Policy

PKI

SAML/OAuth/OpenID

Job description

Job Title: Active Directory Architect

Client: TCS

Location: Palm Beach Gardens, FL

Bill Rate: $53/Hr

Experience: 12-15+ Years

Directory & Authentication

• Microsoft Active Directory (MS AD)
• Microsoft Entra ID (Azure AD)
• Microsoft Certificate Services (AD CS)
• Microsoft ADFS
• Azure SSO
• Microsoft System Center Operations Manager (SCOM)
• Key Management Services (KMS)

Roles & Responsibilities

• Active Directory Architecture & Design
  • Design, implement, and maintain enterprise-scale Microsoft Active Directory environments.
  • Develop Active Directory forest, domain, OU, and site architectures.
  • Plan and execute domain consolidations, migrations, upgrades, and modernization initiatives.
  • Define and maintain AD standards, governance, and security best practices.
  • Ensure high availability, disaster recovery, and business continuity for AD services.
• Microsoft Entra ID (Azure AD)
  • Design and manage hybrid identity solutions integrating on-premises Active Directory with Microsoft Entra ID.
  • Configure and maintain Azure AD Connect synchronization.
  • Implement Conditional Access Policies, Identity Protection, and MFA.
  • Design secure identity lifecycle management processes.
  • Support cloud authentication and authorization strategies.
• Identity Federation & Single Sign-On (SSO)
  • Architect and manage ADFS.
  • Design and support SSO solutions for enterprise applications.
  • Integrate third-party applications using SAML, OAuth, OpenID Connect, and WS-Federation.
  • Troubleshoot federation, authentication, and authorization issues.
• Certificate Services (PKI)
  • Design and administer Microsoft Certificate Services (AD CS).
  • Develop enterprise PKI architecture.
  • Manage Certificate Authorities, templates, enrollment policies, and certificate lifecycle management.
  • Implement certificate-based authentication and encryption solutions.
  • Ensure compliance with security and regulatory requirements.
• Group Policy Management
  • Design, implement, and maintain Group Policy Objects (GPOs).
  • Develop Group Policy standards and governance.
  • Configure security baselines and hardening policies.
  • Troubleshoot Group Policy processing and replication issues.
  • Perform impact analysis for new policy deployments.
• Key Management Services (KMS)
  • Design and manage Microsoft KMS.
  • Maintain software activation solutions across enterprise environments.
  • Monitor and troubleshoot activation-related issues.
  • Ensure compliance with Microsoft licensing requirements.
• SCOM Monitoring & Operations
  • Implement and maintain Microsoft SCOM.
  • Develop monitoring strategies for Active Directory and related infrastructure services.
  • Create management packs, dashboards, alerts, and reporting solutions.
  • Analyze system health and capacity trends.
  • Support incident and problem management activities.
• IP Address Management (IPAM)
  • Design and manage Microsoft IPAM infrastructure.
  • Administer IP address allocation, DNS, and DHCP integration.
  • Develop IP management standards and documentation.
  • Monitor IP utilization and capacity planning.
  • Ensure accurate IP inventory and governance.
• Print Services Management
  • Design and manage enterprise print infrastructure.
  • Administer print servers, print queues, and printer deployments.
  • Implement printer deployment through Group Policies.
  • Troubleshoot printing services and optimize print management processes.
  • Ensure print security and availability.
• Security & Compliance
  • Implement Active Directory security controls and hardening standards.
  • Conduct security reviews, audits, and risk assessments.
  • Monitor privileged access and identity-related security threats.
  • Support compliance initiatives including SOX, NERC, HIPAA, and other regulatory frameworks.
  • Participate in vulnerability remediation and security incident response activities.
• Automation & Scripting
  • Develop automation solutions using PowerShell.
  • Automate administrative, monitoring, and reporting tasks.
  • Create reusable scripts and operational procedures.
  • Drive infrastructure-as-code and identity automation initiatives.
• Documentation & Governance
  • Maintain architecture diagrams and technical documentation.
  • Develop operational procedures, standards, and best practices.
  • Participate in change management and architecture review boards.
  • Provide technical guidance and mentorship to engineering and support teams.