Senior ICAM & AD Architect - Remote/Hybrid

Leidos; United States; On-site; USD 131,000 - 237,000; Full time

Job summary

Leidos is seeking a Senior AD/ICAM Administrator to lead modernization of Identity Access Credential Management (ICAM) and Zero Trust architectures. The role focuses on designing, implementing, and optimizing enterprise-grade Active Directory and Entra ID across on-premises and cloud environments.

The candidate will drive hybrid identity initiatives, implement governance controls, and partner with Security, Networking, and Application teams to enforce Zero Trust principles.

Qualifications

• BS degree and 12+ years of relevant experience.
• 8+ years in a lead role.
• MCSE or MCSA certification in Windows Server / Directory Services required.
• Proven experience with Azure services: Azure Virtual Machines, Azure AD Domain Services, Azure Arc, and Microsoft Entra suite.
• Understanding ABAC/RBAC/PBAC concepts.
• Strong Azure AD/Entra ID and cloud migration experience.

Responsibilities

• Lead AD/IDAM modernization initiatives and hybrid identity programs.
• Design, implement, and manage AD DS with forest/domain architecture and high availability.
• Oversee hybrid identity projects using Azure AD Connect and Entra ID.
• Prototype ICAM/ZT solutions and perform requirements decomposition for development.
• Manage GPOs, OU structures, and security baselines across environments.
• Implement and monitor RBAC, PIM, and Conditional Access in Azure.

Skills

Active Directory

Entra ID

Azure AD Connect

PowerShell scripting

RBAC

Zero Trust

Education

BS degree

Tools

Azure AD Connect

Entra ID

PowerShell

Azure Arc

Microsoft Entra suite

Job description

Leidos is seeking a Senior AD/ICAM Administrator to lead modernization of Identity Access Credential Management (ICAM) and Zero Trust architectures. The role focuses on designing, implementing, and optimizing enterprise-grade Active Directory and Entra ID across on-premises and cloud environments.

The candidate will drive hybrid identity initiatives, implement governance controls, and partner with Security, Networking, and Application teams to enforce Zero Trust principles.