Senior Active Directory Architect – Hybrid, On-Prem AD Migrations

Booker DiMaio, LLC

Manassas, Wilmington (VA, DE)

Hybrid

USD 152,000 - 220,000

Full time

6 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Booker DiMaio, LLC is seeking a Senior Active Directory Architect to lead design, security, and optimization of on-premises AD infrastructure with a focus on migrations, domain consolidation, and hybrid identity using Microsoft Entra ID.

The role emphasizes hands-on AD expertise, strong leadership, and hands-on experience with Entra ID in a large enterprise. Candidate must reside within drivable distance of Manassas, VA or Wilmington, DE and work onsite three days per week.

Qualifications

10+ years of experience in Active Directory engineering, administration, and infrastructure, including at least 3 years in an architect, technical lead, or equivalent senior design role.
Deep technical expertise in Active Directory Domain Services (AD DS), including forests, domains, trusts, sites, replication, and domain architecture.
Extensive experience architecting, maintaining, and optimizing enterprise Active Directory environments.
Demonstrated success leading large-scale Active Directory migrations, domain consolidations, or restructuring projects.
Hands-on experience integrating on-premises Active Directory with Microsoft Entra ID in hybrid identity environments.
Strong knowledge of DNS, DHCP, Group Policy, AD CS, and identity infrastructure dependencies.
Experience with PowerShell scripting and automation for Active Directory administration, migration, or infrastructure management.
Working knowledge of enterprise identity security principles, privileged access controls, and authentication technologies.
Strong troubleshooting, documentation, communication, and technical leadership skills.
Must currently reside within drivable commuting distance of Manassas, VA or Wilmington, DE, and be able to work onsite three days per week.

Responsibilities

Architect, maintain, and optimize enterprise Active Directory Domain Services (AD DS), including forests, domains, trusts, sites, and replication.
Lead large-scale Active Directory migrations, domain consolidations, restructuring initiatives, and related infrastructure modernization projects.
Design and implement hybrid identity integration between on-premises Active Directory and Microsoft Entra ID using Entra Connect and/or Cloud Sync.
Develop and maintain Active Directory architecture standards, security baselines, operational procedures, and technical documentation.
Design and manage Group Policy architecture, administrative delegation, RBAC, and privileged administrative models.
Strengthen Active Directory security by identifying and mitigating risks associated with privilege escalation, Kerberoasting, pass-the-hash attacks, and other identity-based threats.
Support identity lifecycle management, authentication, authorization, SSO, and MFA.
Implement and manage Microsoft Entra ID capabilities, including Conditional Access, Privileged Identity Management (PIM), and application registrations.
Collaborate with security, infrastructure, and compliance teams to support Zero Trust initiatives, audit requirements, and enterprise security objectives.
Contribute to privileged access management (PAM) and identity governance initiatives using applicable enterprise platforms.
Develop PowerShell scripts and automation to improve identity administration, migration execution, security, and operational efficiency.
Provide technical leadership, mentor engineering teams, and communicate architectural decisions and recommendations to technical stakeholders and leadership.