Active Directory Architect Irvine, CA Contract

Tech Mirrors; Irvine (CA); On-site; USD 96,000 - 152,000; Full time

Job summary

Tech Mirrors in Irvine, CA is seeking an Active Directory Architect on a contract basis. The role focuses on IAM/AD security, DC operations, DNS management, GPO administration, PKI and LDAPS configuration, and cloud-integrated AD support.

You will ensure secure, scalable AD services and support cross-functional IT teams. The candidate should have strong experience with Windows Server security, domain controller replication, and integration with AWS/Azure/GCP environments.

Qualifications

• Experience with IAM and Active Directory security.
• Strong AD and Windows Server security remediation skills.
• Experience performing Domain Controller and schema updates.
• Experience with FSMO roles and DC replication troubleshooting.
• Experience with Windows Event auditing and centralized logging.
• DNS management including reverse zones, PTR, SOA, NS, A, CNAME, MX, TXT, SRV.
• Group Policy management experience.
• Experience with PKI/Certificates and TLS/LDAPS configuration.
• Networking fundamentals: TCP/IP, ports used by AD.
• Cloud experience across AWS, Azure, and GCP including VM troubleshooting.

Responsibilities

• Lead IAM and AD architecture design and security.
• Manage DC operations, schema updates, replication, and FSMO roles.
• Configure and maintain DNS zones, DNS records, and DNS security.
• Implement and manage GPOs and group policy settings.
• Manage PKI and certificate lifecycle, LDAPS configuration.
• Maintain secure AD with TLS cipher suites and encryption.
• Troubleshoot Windows Server vulnerabilities and patching.
• Monitor and forward AD audit events to centralized logging.
• Work with cloud environments to deploy and troubleshoot VMs.
• Ensure networking configurations support AD and DC communications.

Skills

IAM / Access Management

Active Directory

Windows Server security

DC FSMO operations

Event auditing & logging

DNS management

GPO management

PKI / Certificates

Networking TCP/IP

Cloud (AWS/Azure/GCP)

Tools

LDAPS

DNS records tools

Certificate management tools

VMs in cloud environments

Job description

Active Directory Architect
Irvine, CA
Contract

• 1. IAM (identity and Access Management) and security experience/CIAA (Confidentiality, Integrity, Authorization and Accountability)
• 2. Windows Server vulnerability remediation, patching, and secure compliance implementation.
• 3. Domain Controller and DC schema updates from 2019 or 2022 to 2025, replication and troubleshooting.
• 4. Managing Flexible Single Master Operations roles
• 5. Windows Event Auditing and forwarding audit events to centralized logging
• 6. DNS record management, adding reverse zones and PTR records. Also managing SOA, NS A, CNAME, MX, TXT, SRV records
• 7. GPO group policy management experience.
• 8. Managing PKI/Certificates, ssl cipher suites associated with AD, and LDAPS configuration
• 9. TCP/IP, basic networking TCP/UDP and experience on the ports operating inside Microsoft Active Directory.
• 10. Cloud Experience, AWS, Azure, GCP, virtual machines and troubleshooting VM 's inside a cloud environment.