Senior Active Directory Architect — Hybrid DC DoS

SkyePoint Decisions; Washington (District of Columbia); Hybrid; USD 150,000 - 183,000; Full time

Benefits offered by this job

Certification incentive program

Paid time off

Floating federal holidays

Health insurance options

401k matched

Job summary

SkyePoint Decisions is growing its team in Washington, DC, and seeks an experienced Active Directory Architect to support a Department of State client in a hybrid role. The candidate will provide expert knowledge of AD, AAD, ADFS, and Azure integration, along with PowerShell scripting, GPO design, and security risk analysis across complex, multi-forest environments.

The role emphasizes leading architecture activities, mentoring teammates, and delivering secure, scalable identity infrastructure

Qualifications

• Bachelor’s degree with 10+ years of recent system engineering experience.
• Expert knowledge administering AD, AAD and ADFS in hybrid environments.
• Expert knowledge administering AD and AAD support services such as AAD Conditional Access Policies, AAD Self-Service Password Reset (SSPR), AAD Connect and Windows Server DNS.
• Expert knowledge designing, testing, deploying and maintaining Active Directory Group Policy (GPO) for the purpose of securing Domain Controllers, Domain Member Servers and Domain Member Workstations.
• Expert analyzing security risks with proposed changes to AD, AAD, ADFS, AZAP, Domain Controllers, GPOs, etc. and providing an understandable summary to management.
• Experience administering multiple AD forests with forest trusts.
• Knowledge of third-party AD support services such as Quest Active Roles, Quest Change Auditor for AD.
• Knowledge of Microsoft Identity Manager.
• Knowledge configuring remote access via AZAP including Kerberos constrained delegation for SSO.
• Deep understanding of monitoring best practices.
• Experience with Windows Server 2016/2019, DNS, networks, DMZs, security zones.
• PowerShell scripting experience.
• Expert knowledge of ADDS, ADFS, Azure AD and Windows Server OS 2016+.
• Hands-on with Azure AD Connect and AD Cloud SaaS.
• U.S. Citizenship and Active Secret clearance is required.

Responsibilities

• Provide in-depth knowledge of Active Directory, domain controllers, Azure Cloud, and PowerShell scripting.
• Support the DOS modernization program with cybersecurity, engineering, and operations services.
• Lead and mentor teams; design solutions for others to code; prepare unit tests.
• Develop standards, roadmaps, and communicate across architecture, engineering, and operations teams.
• Create comprehensive reports and guides for AD hardening and infrastructure enhancements.
• Perform Tier 3 troubleshooting including complex replication and multi-domain issues.

Skills

PowerShell

Active Directory

Azure AD

ADFS

Windows Server

DNS

GPO

Hybrid Environments

Security Risk Analysis

Monitoring

Education

Bachelor’s degree

Tools

Quest Active Roles

Quest Change Auditor for AD

Azure AD Connect

Job description

SkyePoint Decisions is growing its team in Washington, DC, and seeks an experienced Active Directory Architect to support a Department of State client in a hybrid role. The candidate will provide expert knowledge of AD, AAD, ADFS, and Azure integration, along with PowerShell scripting, GPO design, and security risk analysis across complex, multi-forest environments.

The role emphasizes leading architecture activities, mentoring teammates, and delivering secure, scalable identity infrastructure