AD Architect

Themesoft Inc; Irvine (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

The AD Architect role at Themesoft Inc in Irvine, CA, is a contract position requiring 10–12 years of IAM and AD security experience. The candidate will handle Domain Controllers, DNS, GPOs, PKI and cloud integration across AWS/Azure/GCP.

Responsibilities include designing secure cloud architectures, establishing policies and risk management, and collaborating with IT and DevSecOps teams to embed security into applications. Onsite work is expected.

Qualifications

• 10–12 years of IAM and AD security experience.
• Experience with Windows Server patching and secure compliance.
• Experience updating Domain Controllers and schema.
• Experience managing DNS, GPOs and certificate infrastructures.
• Networking and TCP/IP basics in AD environments.
• Cloud experience across AWS, Azure, and GCP.

Responsibilities

• Create security blueprints and roadmaps for cloud adoption.
• Design secure, scalable, compliant cloud architectures.
• Define security policies, standards, and guidelines for cloud environments.
• Assess cloud risks and ensure regulatory compliance.
• Configure network security, IAM, and encryption strategies.
• Collaborate with IT and development to embed security in apps.

Skills

IAM

Windows Server

Domain Controller

GPO

PKI/Certificates

Networking

Cloud (AWS/Azure/GCP)

Security Architecture

Job description

Job Title: AD Architect

Location: Irvine, CA

Duration: 6-12+ months

WorkArrangement:Onsite

EmploymentType:Contract

ROLE_DESCRIPTION

1. 1. IAM (identity and Access Management) and security experience/CIAA (Confidentiality, Integrity, Authorization and Accountability)
2. 2. Windows Server vulnerability remediation, patching, and secure compliance implementation.
3. 3. Domain Controller and DC schema updates from 2019 or 2022 to 2025, replication and troubleshooting.
4. 4. Managing Flexible Single Master Operations roles
5. 5. Windows Event Auditing and forwarding audit events to centralized logging
6. 6. DNS record management, adding reverse zones and PTR records. Also managing SOA, NS A, CNAME, MX, TXT, SRV records
7. 7. GPO group policy management experience.
8. 8. Managing PKI/Certificates, ssl cipher suites associated with AD, and LDAPS configuration
9. 9. TCP/IP, basic networking TCP/UDP and experience on the ports operating inside Microsoft Active Directory.
10. 10. Cloud Experience, AWS, Azure, GCP, virtual machines and troubleshooting VM ‘s inside a cloud environment."

Experience needed - 10 - 12 Years

Strategic Planning

Creating security blueprints and roadmaps for cloud adoption that align with business goals.

Security Design Implementation

Designing secure| scalable| and compliant cloud architectures.

Policy Definition

Establishing security policies| standards| and guidelines for public| private| and hybrid clouds.

Risk Management Compliance

Assessing cloud environments for vulnerabilities| managing risk| and ensuring compliance with regulations.

Technical Controls

Configuring network security| identity and access management (IAM)| and encryption strategies.

Collaboration Guidance

Working with IT and development teams to embed security into applications (DevSecOps)

Work Authorization

Applicants must be legally authorized to work in the United States.

Equal Employment Opportunity

[Themesoft Inc] is an Equal Employment Opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by applicable federal, state, or local law.