Active Directory Architect

Active Directory (AD) Architect responsible for designing, implementing, and maintaining the architecture of Active Directory environments, which are essential for managing and securing user access to IT resources in a Windows-based network.

Key Responsibilities:
Design AD Architecture:
Create scalable and secure AD structures, including forests, domains, organizational units (OUs), and trust relationships.
Plan for global or enterprise-level deployments, including multi-site replication and availability.
Security and Policy Enforcement:
Implement Group Policies (GPOs) for user/device configuration and security.
Design and enforce role-based access control and authentication strategies.
Integration and Interoperability:
Integrate AD with other systems (e.g., Azure AD, third-party identity providers, M365, LDAP systems).
Ensure interoperability across hybrid cloud and on-prem environments.
Directory Services Planning:
Plan for DNS, DHCP, and name resolution in relation to AD.
Design replication strategies and domain controller placement for performance and redundancy.
Disaster Recovery and Continuity:
Develop backup, restore, and disaster recovery plans for AD infrastructure.
Performance Tuning and Troubleshooting:
Monitor and optimize AD performance.
Diagnose and resolve AD-related issues (replication failures, authentication issues, etc.).
Documentation and Compliance:
Maintain documentation of AD architecture, changes, and policies.
Ensure compliance with internal standards and external regulations (e.g., ATO, DISA STIG).

Skills & Tools:
Deep knowledge of Windows Server, PowerShell, Azure AD, DNS/DHCP, Kerberos, LDAP, and PKI.
Familiarity with tools like ADSI Edit, Group Policy Management Console, Azure AD Connect, and Microsoft Identity Manager.