Active Directory Architect

Job Description

We are seeking an experienced Active Directory Architect to design, implement, and manage enterprise identity and directory services within a complex IT environment. The ideal candidate will have strong expertise in Microsoft Active Directory, Windows Server infrastructure, identity and access management, and enterprise security, preferably within the Utilities domain.

Key Responsibilities

• Design and architect enterprise Active Directory (AD) infrastructure, including multi-domain and multi-forest environments.
• Develop AD architecture strategies, standards, and roadmaps aligned with business and security requirements.
• Design and implement Group Policy Objects (GPOs), organizational units (OUs), and delegated administration.
• Manage Active Directory replication, DNS integration, domain controllers, and site topology.
• Design and implement identity security controls, privileged access management, and least-privilege administration.
• Support Active Directory migrations, domain consolidation, and forest restructuring.
• Integrate Active Directory with Microsoft Entra ID (Azure AD), Microsoft 365, and enterprise identity platforms.
• Implement security best practices, audit controls, disaster recovery, and business continuity plans.
• Troubleshoot complex authentication, replication, Kerberos, LDAP, and Group Policy issues.
• Collaborate with cybersecurity, infrastructure, cloud, and application teams.
• Create architecture diagrams, technical documentation, and implementation plans.

Required Skills

• Extensive experience in Microsoft Active Directory architecture and engineering.
• Strong knowledge of Windows Server, DNS, DHCP, Group Policy, LDAP, Kerberos, and AD replication.
• Experience with multi-domain and multi-forest environments.
• Expertise in identity and access management and privileged access security.
• Experience with PowerShell scripting and infrastructure automation.
• Knowledge of Microsoft Entra ID, hybrid identity, and identity synchronization.
• Experience with AD security assessments, hardening, and remediation.
• Strong architecture, troubleshooting, and stakeholder communication skills.

Preferred Qualifications

• Experience in the Utilities industry, including electric, gas, or water organizations.
• Experience with critical infrastructure security and regulatory compliance.
• Knowledge of NIST, CIS benchmarks, and relevant security frameworks.
• Experience with Active Directory migrations and enterprise transformation projects.
• Microsoft identity or Windows Server certifications are a plus.