Job Requirements
Chantilly, VA
Top Secret/SCI CI Polygraph
Career Level not specified
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
We are seeking a Microsoft Solutions Architect to lead the design, modernization, security, and automation of enterprise on-prem Microsoft infrastructure. This role serves as the technical authority for Windows Server and Active Directory architecture, driving strategic technology decisions, engineering standards, and long-term infrastructure roadmaps.
The ideal candidate combines deep technical expertise with strong leadership skills and thrives in complex, highly secure enterprise environments.
What You'll Do
Architecture & Strategy
Define and maintain enterprise architecture standards for Microsoft technologies.
Develop technology roadmaps, modernization strategies, and future-state designs.
Lead architecture reviews, technical evaluations, and solution design efforts.
Serve as the primary Microsoft infrastructure SME for technical planning and stakeholder engagements.
Infrastructure Engineering
Design, implement, and support highly available Microsoft on-prem solutions, including:
Active Directory Domain Services (AD DS)
Windows Server
DNS, DHCP, Group Policy, and Kerberos
PKI/AD CS
File, storage, and remote desktop services
Design delegated administration, RBAC, and identity management solutions.
Create detailed architectural documentation, implementation plans, and operational standards.
Automation & Security
Develop automation solutions using PowerShell and modern infrastructure automation tools.
Implement security best practices, privileged access controls, and DISA STIG compliance.
Lead vulnerability remediation, system hardening, and infrastructure security initiatives.
Technical Leadership
Troubleshoot and resolve complex infrastructure and performance issues.
Perform root cause analysis and drive continuous improvement.
Lead technical projects through the full system lifecycle and mentor engineering teams.
Collaborate with security, network, application, and operations teams to deliver enterprise solutions.
Required Clearance:
TS/SCI CI Poly
Required Qualifications
Experience
Candidate must have 16 years of experience that can be a combination of work history and education. This equates to a Doctorate and 8 years, master’s and 10 years, bachelor’s and 12 years, associates and 14 years or HS diploma and 16 years.
Bachelor's degree in Computer Science, Information Technology, Engineering, or related field (or equivalent experience).
7+ years designing and supporting enterprise Windows Server environments.
Technical Expertise
Deep expertise in:
Windows Server
Active Directory
Group Policy
DNS and DHCP
PKI/AD CS
Enterprise identity and access management
High-availability and clustering technologies
Experience with Active Directory architecture, delegated administration, and RBAC design.
Advanced PowerShell scripting and infrastructure automation experience.
Experience with enterprise patch management, configuration management, and deployment automation.
Strong understanding of Microsoft security best practices, DISA STIGs, least-privilege access, and vulnerability remediation.
Experience with VMware, Hyper-V, or comparable virtualization platforms.
Strong knowledge of networking fundamentals, including TCP/IP, DNS, VLANs, firewalls, and network segmentation.
Proven ability to troubleshoot complex Windows, networking, virtualization, and storage environments
Additional required qualifications include: Compliance with Department of Defense (DoD) 8140 Information Assurance Technical (IAT) Level 2.
Professional Skills
Strong analytical and problem-solving abilities.
Excellent communication and technical documentation skills.
Ability to lead complex technical initiatives and work independently in a fast-paced environment
Desired Qualifications
Experience with multi-site and geographically distributed Active Directory environments.
Experience with domain consolidations, migrations, and infrastructure modernization initiatives.
Experience with Ansible, Terraform, or similar automation platforms.
Experience with VDI, FSLogix, DEM, and enterprise desktop engineering.
Experience integrating Windows and Red Hat Enterprise Linux environments.
Experience with enterprise backup, disaster recovery, and business continuity solutions.
Knowledge of Zero Trust architecture and cybersecurity frameworks.
Experience leading architecture reviews, proof-of-concept efforts, and large-scale infrastructure transformation programs.
Experience working in highly regulated enterprise or government environments.
The ideal candidate combines deep technical expertise with strong leadership skills and thrives in complex, highly secure enterprise environments.
What You'll Do
Architecture & Strategy
Define and maintain enterprise architecture standards for Microsoft technologies.
Develop technology roadmaps, modernization strategies, and future-state designs.
Lead architecture reviews, technical evaluations, and solution design efforts.
Serve as the primary Microsoft infrastructure SME for technical planning and stakeholder engagements.
Infrastructure Engineering
Design, implement, and support highly available Microsoft on-prem solutions, including:
Active Directory Domain Services (AD DS)
Windows Server
DNS, DHCP, Group Policy, and Kerberos
PKI/AD CS
File, storage, and remote desktop services
Design delegated administration, RBAC, and identity management solutions.
Create detailed architectural documentation, implementation plans, and operational standards.
Automation & Security
Develop automation solutions using PowerShell and modern infrastructure automation tools.
Implement security best practices, privileged access controls, and DISA STIG compliance.
Lead vulnerability remediation, system hardening, and infrastructure security initiatives.
Technical Leadership
Troubleshoot and resolve complex infrastructure and performance issues.
Perform root cause analysis and drive continuous improvement.
Lead technical projects through the full system lifecycle and mentor engineering teams.
Collaborate with security, network, application, and operations teams to deliver enterprise solutions.
Required Clearance:
TS/SCI CI Poly
Required Qualifications
Experience
Candidate must have 16 years of experience that can be a combination of work history and education. This equates to a Doctorate and 8 years, master’s and 10 years, bachelor’s and 12 years, associates and 14 years or HS diploma and 16 years.
Bachelor's degree in Computer Science, Information Technology, Engineering, or related field (or equivalent experience).
7+ years designing and supporting enterprise Windows Server environments.
Technical Expertise
Deep expertise in:
Windows Server
Active Directory
Group Policy
DNS and DHCP
PKI/AD CS
Enterprise identity and access management
High-availability and clustering technologies
Experience with Active Directory architecture, delegated administration, and RBAC design.
Advanced PowerShell scripting and infrastructure automation experience.
Experience with enterprise patch management, configuration management, and deployment automation.
Strong understanding of Microsoft security best practices, DISA STIGs, least-privilege access, and vulnerability remediation.
Experience with VMware, Hyper-V, or comparable virtualization platforms.
Strong knowledge of networking fundamentals, including TCP/IP, DNS, VLANs, firewalls, and network segmentation.
Proven ability to troubleshoot complex Windows, networking, virtualization, and storage environments
Additional required qualifications include: Compliance with Department of Defense (DoD) 8140 Information Assurance Technical (IAT) Level 2.
Professional Skills
Strong analytical and problem-solving abilities.
Excellent communication and technical documentation skills.
Ability to lead complex technical initiatives and work independently in a fast-paced environment
Desired Qualifications
Experience with multi-site and geographically distributed Active Directory environments.
Experience with domain consolidations, migrations, and infrastructure modernization initiatives.
Experience with Ansible, Terraform, or similar automation platforms.
Experience with VDI, FSLogix, DEM, and enterprise desktop engineering.
Experience integrating Windows and Red Hat Enterprise Linux environments.
Experience with enterprise backup, disaster recovery, and business continuity solutions.
Knowledge of Zero Trust architecture and cybersecurity frameworks.
Experience leading architecture reviews, proof-of-concept efforts, and large-scale infrastructure transformation programs.
Experience working in highly regulated enterprise or government environments.
group id: 10110693a