Azure Directory Architect

METRIX IT SOLUTIONS INC; Irvine (CA); On-site; USD 100,000 - 150,000; Full time

Job summary

METRIX IT SOLUTIONS INC in Irvine, CA is seeking an IT security and Windows Server specialist with IAM, AD, DNS, PKI, and cloud experience. The role involves securing identity and access, remediating vulnerabilities, managing Domain Controllers, and coordinating with cloud environments across AWS, Azure, and GCP.

The ideal candidate will handle patching, auditing, and centralized logging, while supporting AD services and DNS infrastructure in a hybrid enterprise setting.

Qualifications

• IAM and security experience required.
• Windows Server patching, secure compliance implementation.
• Domain Controller updates and troubleshooting (2019/2022 to 2025).
• Managing FSMO roles (Flexible Single Master Operations).
• Windows Event Auditing and forwarding events to centralized logging.
• DNS management including reverse zones and various record types.
• Managing PKI/Certificates and LDAPS configuration for AD.
• TCP/IP basics and ports in Microsoft AD environment.
• Cloud experience across AWS, Azure, GCP and VM troubleshooting in cloud.

Skills

IAM experience

Security experience

Domain Controllers

Networking basics

Cloud experience

Tools

Windows Server

Active Directory

DNS management

PKI/Certificates

LDAPS/TLS

Cloud platforms

Job description

"1. IAM (identity and Access Management) and security experience/CIAA (Confidentiality, Integrity, Authorization and Accountability)

2. Windows Server vulnerability remediation, patching, and secure compliance implementation.

3. Domain Controller and DC schema updates from 2019 or 2022 to 2025, replication and troubleshooting.

4. Managing Flexible Single Master Operations roles

5. Windows Event Auditing and forwarding audit events to centralized logging

6. DNS record management, adding reverse zones and PTR records. Also managing SOA, NS A, CNAME, MX, TXT, SRV records

8. Managing PKI/Certificates, ssl cipher suites associated with AD, and LDAPS configuration

9. TCP/IP, basic networking TCP/UDP and experience on the ports operating inside Microsoft Active Directory.

10. Cloud Experience, AWS, Azure, GCP, virtual machines and troubleshooting VM ‘s inside a cloud environment."