Senior Active Directory Architect

About the role

We are seeking a Senior Active Directory Architect to own the design, security and evolution of an enterprise identity platform spanning on-premises Active Directory and Microsoft Entra ID. You will lead hybrid identity strategy, drive Identity and Access Management (IAM) initiatives, and serve as the senior technical authority for identity across the enterprise.

Responsibilities

• Architect, maintain and optimize enterprise AD forests, domains, trusts, sites and replication
• Design and lead hybrid identity integration between on-premises AD and Microsoft Entra ID (Entra Connect / Cloud Sync)
• Define IAM strategy covering authentication, authorization, provisioning and joiner/mover/leaver lifecycle
• Implement and govern SSO, MFA and Conditional Access policies
• Lead Privileged Access Management, tiered admin models and Entra PIM
• Harden AD against threats such as Kerberoasting, pass-the-hash and privilege escalation
• Manage Group Policy architecture, delegation models and RBAC
• Lead AD migrations, consolidations and domain restructuring projects
• Partner with Security, Compliance and Infrastructure teams on Zero Trust and audit requirements (SOX, HIPAA, NIST)
• Mentor engineers, set architecture standards and document designs and runbooks