AD Architect

Tata Consultancy Services; Irvine (CA); On-site; USD 95,000 - 140,000; Full time

Job summary

Tata Consultancy Services in California is seeking an IT security and Windows AD specialist to manage IAM, DCs, and cloud resources.

You will patch Windows servers, configure PKI/LDAPS, manage DNS, and ensure secure logging and compliance, while coordinating across on-prem and cloud environments including AWS, Azure, and GCP.

Qualifications

• IAM and security experience required.
• Windows Server patching and secure compliance knowledge.
• Experience with Domain Controllers and FSMO roles.
• Ability to audit events and forward to centralized logging.
• DNS management including reverse zones and records.
• PKI/Certificates and LDAPS configuration expertise.
• TCP/IP networking within Active Directory environments.

Responsibilities

• Maintain IAM security posture and access controls.
• Patch Windows servers and enforce compliance.
• Manage Domain Controllers and AD replication issues.
• Configure and monitor DNS, including records.
• Implement PKI and LDAPS for secure communications.
• Operate cloud resources and troubleshoot VMs (AWS/Azure/GCP).

Skills

IAM security

Windows Server

DC management

FSMO roles

Event auditing

DNS management

PKI certificates

LDAPS configuration

TCP/IP networking

Cloud platforms

VMs

Tools

Active Directory

Azure

AWS

GCP

LDAPS

DNS tooling

Job description

• IAM (identity and Access Management) and security experience/CIAA (Confidentiality, Integrity, Authorization and Accountability)
• Windows Server vulnerability remediation, patching, and secure compliance implementation.
• Domain Controller and DC schema updates from 2019 or 2022 to 2025, replication and troubleshooting.
• Managing Flexible Single Master Operations roles
• Windows Event Auditing and forwarding audit events to centralized logging
• DNS record management, adding reverse zones and PTR records. Also managing SOA, NS A, CNAME, MX, TXT, SRV records
• Managing PKI/Certificates, ssl cipher suites associated with AD, and LDAPS configuration
• TCP/IP, basic networking TCP/UDP and experience on the ports operating inside Microsoft Active Directory.
• Cloud Experience, AWS, Azure, GCP, virtual machines and troubleshooting VM ‘s inside a cloud environment.