Active Directory Architect - Remote

Covetus; Texas City (TX); On-site; USD 100,000 - 130,000; Full time

Job summary

A technology services provider is looking for an Architect to design and manage Active Directory and Azure Active Directory environments. The role involves defining technical standards, implementing secure identity solutions, and managing incident resolution. Ideal candidates have 8-10 years of experience in AD/AAD engineering, expertise in identity management, and relevant certifications. Strong analytical and communication skills are required for this position based in Texas. Competitive benefits and growth opportunities are provided.

Qualifications

• Minimum 8-10 years in AD/AAD engineering and architecture.
• Experience in retail or enterprise IT environments is a plus.

Responsibilities

• Define and manage technical standards for Active Directory and Azure AD.
• Design and implement secure, scalable identity solutions for hybrid environments.
• Handle Level 3 activities: critical incident resolution, change management.
• Maintain and optimize AD infrastructure.
• Monitor Azure AD Connect Health portal.
• Implement SSO integrations using OAuth, OIDC, and SAML.

Skills

Active Directory (On-Prem)

AD replication troubleshooting

Conditional Access

MFA

PowerShell scripting

Experience with Microsoft Graph API

Strong analytical skills

Excellent communication

Ability to work in Agile

Education

Microsoft Certified: Azure Administrator Associate

Microsoft Certified: Azure Solutions Architect Expert

Job description

In this role, the Architect is responsible for designing, implementing, and managing on-premises Active Directory and Azure Active Directory (AAD) environments. This position requires deep expertise in identity and access management, advanced troubleshooting, and architectural design for hybrid environments.

Key Responsibilities

• Define and manage technical standards for Active Directory and Azure AD.
• Design and implement secure, scalable identity solutions for hybrid environments.
• Develop IAM policies, standards, and procedures aligned with compliance requirements.

Operations & Support

• Handle Level 3 (L3) activities: critical incident resolution, change management, and complex troubleshooting.
• Maintain and optimize AD infrastructure (DNS, GPOs, replication, FSMO roles).
• Monitor Azure AD Connect Health portal for sync alerts and performance analytics.

Integration & Automation

• Configure and troubleshoot Azure AD Connect, synchronization policies, and staging servers.
• Implement SSO integrations using OAuth, OIDC, and SAML.
• Develop advanced PowerShell scripts and Graph API integrations for automation.

Security & Compliance

• Implement MFA, Conditional Access, and Privileged Identity Management (PIM).
• Ensure compliance through periodic audits and reporting.
• Manage disaster recovery planning for AADC and ADFS environments.
• Act as a trusted advisor for stakeholders and lead technical governance meetings.
• Provide knowledge transfer and mentoring to junior engineers.
• Participate in service reviews and strategic planning for IAM services.

Required Technical Skills

• Active Directory (On-Prem)
• AD replication troubleshooting, schema updates, GPO management.
• DNS/DHCP provisioning and trust relationships.
• Conditional Access, MFA, and identity lifecycle management.
• ADFS
• Federation setup, DR planning, certificate management.
• Automation
• PowerShell scripting for AD/AAD tasks.
• Experience with Microsoft Graph API for automation.
• Strong analytical and problem-solving skills.
• Excellent communication and stakeholder management.
• Ability to work in Agile environments and lead technical initiatives.
• Strategic thinking and business acumen.

Experience & Certifications

• Experience: Minimum 8-10 years in AD/AAD engineering and architecture.
• Certifications: Microsoft Certified: Azure Administrator Associate or Azure Solutions Architect Expert preferred.
• Domain Knowledge: Retail or enterprise IT environments is a plus.