Active Directory Architect

Job Title: Active Directory Architect
Client: TCS
Location: Palm Beach Gardens, FL
Bill Rate: $53/Hr
Experience: 12-15+ Years
Directory & Authentication
Microsoft Active Directory (MS AD)
Microsoft Entra ID (Azure AD)
Microsoft Certificate Services (AD CS)
Microsoft ADFS
Azure SSO
Microsoft System Center Operations Manager (SCOM)
Key Management Services (KMS)
Roles & Responsibilities
Active Directory Architecture & Design
Design, implement, and maintain enterprise-scale Microsoft Active Directory environments. Develop Active Directory forest, domain, OU, and site architectures.

Plan and execute domain consolidations, migrations, upgrades, and modernization initiatives. Define and maintain AD standards, governance, and security best practices. Ensure high availability, disaster recovery, and business continuity for AD services. Microsoft Entra ID (Azure AD)
Design and manage hybrid identity solutions integrating on-premises Active Directory with Microsoft Entra ID. Configure and maintain Azure AD Connect synchronization. Implement Conditional Access Policies, Identity Protection, and MFA. Design secure identity lifecycle management processes.

Support cloud authentication and authorization strategies. Identity Federation & Single Sign-On (SSO)
Architect and manage ADFS. Design and support SSO solutions for enterprise applications. Integrate third-party applications using SAML, OAuth, OpenID Connect, and WS-Federation. Troubleshoot federation, authentication, and authorization issues. Certificate Services (PKI)
Design and administer Microsoft Certificate Services (AD CS). Develop enterprise PKI architecture. Manage Certificate Authorities, templates, enrollment policies, and certificate lifecycle management.

Implement certificate-based authentication and encryption solutions. Ensure compliance with security and regulatory requirements. Group Policy Management
Design, implement, and maintain Group Policy Objects (GPOs). Develop Group Policy standards and governance. Configure security baselines and hardening policies. Troubleshoot Group Policy processing and replication issues. Perform impact analysis for new policy deployments. Key Management Services (KMS)
Design and manage Microsoft KMS. Maintain software activation solutions across enterprise environments.

Monitor and troubleshoot activation-related issues. Ensure compliance with Microsoft licensing requirements. SCOM Monitoring & Operations
Implement and maintain Microsoft SCOM. Develop monitoring strategies for Active Directory and related infrastructure services. Create management packs, dashboards, alerts, and reporting solutions. Analyze system health and capacity trends. Support incident and problem management activities. IP Address Management (IPAM)
Design and manage Microsoft IPAM infrastructure. Administer IP address allocation, DNS, and DHCP integration.

Develop IP management standards and documentation. Monitor IP utilization and capacity planning. Ensure accurate IP inventory and governance. Print Services Management
Design and manage enterprise print infrastructure. Administer print servers, print queues, and printer deployments. Implement printer deployment through Group Policies. Troubleshoot printing services and optimize print management processes. Ensure print security and availability. Security & Compliance
Implement Active Directory security controls and hardening standards. Conduct security reviews, audits, and risk assessments.

Monitor privileged access and identity-related security threats. Support compliance initiatives including SOX, NERC, HIPAA, and other regulatory frameworks. Participate in vulnerability remediation and security incident response activities. Automation & Scripting
Develop automation solutions using PowerShell. Automate administrative, monitoring, and reporting tasks. Create reusable scripts and operational procedures. Drive infrastructure-as-code and identity automation initiatives. Documentation & Governance
Maintain architecture diagrams and technical documentation.

Develop operational procedures, standards, and best practices. Participate in change management and architecture review boards. Provide technical guidance and mentorship to engineering and support teams.