Active Directory Architect

Hiring: Active Directory Architect

Location: Irvine, CA – 100% Onsite
Duration: 6 Months
Experience: 10–12+ Years

We are looking for an experienced AD Architect with strong expertise in Active Directory, IAM/Security, Windows Server, DNS, PKI, GPO, networking, and cloud environments.

🔹 Key Responsibilities

• Design and implement Active Directory architecture, security, and IAM solutions aligned with CIAA principles.
• Perform Windows Server vulnerability remediation, patching, and secure compliance implementation.
• Manage Domain Controllers, including upgrades/schema updates from Windows Server 2019/2022 to 2025, replication, and troubleshooting.
• Manage FSMO (Flexible Single Master Operations) roles.
• Implement Windows Event Auditing and forward audit events to centralized logging platforms.
• Manage DNS records, reverse lookup zones, PTR, SOA, NS, A, CNAME, MX, TXT, and SRV records.
• Administer and troubleshoot Group Policy Objects (GPOs).
• Manage PKI/certificates, SSL cipher suites, LDAPS configuration, and AD-related certificate services.
• Troubleshoot TCP/IP, TCP/UDP, networking, and Active Directory-related ports and connectivity.
• Support AWS, Azure, and Google Cloud Platform environments, including virtual machine administration and troubleshooting.
• Develop secure and scalable cloud security architectures and roadmaps.
• Define security policies, standards, and guidelines for public, private, and hybrid cloud environments.
• Assess vulnerabilities, manage risks, and support regulatory/security compliance.
• Configure network security, IAM, encryption, and other technical security controls.
• Collaborate with infrastructure, application, and development teams to implement DevSecOps and secure-by-design practices.

🔹 Required Skills

• Active Directory / AD Architecture
• Windows Server 2019/2022/2025
• Domain Controllers & AD Replication
• FSMO Roles
• DNS Administration
• GPO / Group Policy
• IAM & Security
• PKI / Certificates / LDAPS
• SSL/TLS Cipher Suites
• Windows Event Auditing & Log Forwarding
• TCP/IP, TCP/UDP & Networking
• AWS / Azure / Google Cloud Platform
• Cloud Security Management
• Vulnerability Remediation & Compliance
• AWS Networking

🔹 Preferred

• Cloud Security Architecture
• Hybrid Cloud Security
• DevSecOps
• Risk Management & Compliance
• Security Policy/Standards Development
• Network Security & Encryption