Active Directory Architect

**Please strictly adhere to the following resume naming convention:
ALL CAPS, NO SPACES B/T UNDERSCORES
PTN_US_GBAMSREQID_CANDIDATEBEELINEID
i.e. PTN_US_9999999_SKIPJOHNSON0413

Bill Rate $70/hr

****PLEASE NOTE The rates may be negotiable based on experience, education, geographic location, and other factors..****

MSP Owner: Felix Avalos
Location: Palm Beach Gardens, FL
Duration: 6 months
GBaMS ReqID: 10975260

Active Directory Architect
Preferred Experience Range 12- 15+ Years

Directory & Authentication
• MS AD
• Azure AD
• MS Certificate Services
• MS ADFS
• Azure SSO
• Active Directory Monitor System (SCOM)
• KMS

Roles & Responsibilities Active Directory Architecture & Design
• Design, implement, and maintain enterprise-scale Microsoft Active Directory environments.
• Develop Active Directory forest, domain, OU, and site architectures.
• Plan and execute domain consolidations, migrations, upgrades, and modernization initiatives.
• Define and maintain AD standards, governance, and security best practices.
• Ensure high availability, disaster recovery, and business continuity for AD services.
Microsoft Entra ID (Azure AD)
• Design and manage hybrid identity solutions integrating on-premises Active Directory with Microsoft Entra ID (Azure AD).
• Configure and maintain Azure AD Connect synchronization.
• Implement Conditional Access Policies, Identity Protection, and Multi-Factor Authentication (MFA).
• Design secure identity lifecycle management processes.
• Support cloud authentication and authorization strategies.
Identity Federation & Single Sign-On (SSO)
• Architect and manage Active Directory Federation Services (ADFS).
• Design and support Single Sign-On (SSO) solutions for enterprise applications.
• Integrate third-party applications with SAML, OAuth, OpenID Connect, and WS-Federation protocols.
• Troubleshoot federation, authentication, and authorization issues.
Certificate Services (PKI)
• Design and administer Microsoft Certificate Services (AD CS).
• Develop enterprise Public Key Infrastructure (PKI) architecture.
• Manage Certificate Authorities (CA), templates, enrollment policies, and certificate lifecycle management.
• Implement certificate-based authentication and encryption solutions.
• Ensure compliance with security and regulatory requirements.
Group Policy Management
• Design, implement, and maintain Group Policy Objects (GPOs).
• Develop Group Policy standards and governance.
• Configure security baselines and hardening policies.
• Troubleshoot Group Policy processing and replication issues.
• Perform impact analysis for new policy deployments.
Key Management Services (KMS)
• Design and manage Microsoft Key Management Services (KMS).
• Maintain software activation solutions across enterprise environments.
• Monitor and troubleshoot activation-related issues.
• Ensure compliance with Microsoft licensing requirements.
SCOM Monitoring & Operations
• Implement and maintain Microsoft System Center Operations Manager (SCOM).
• Develop monitoring strategies for Active Directory and related infrastructure services.
• Create management packs, dashboards, alerts, and reporting solutions.
• Analyze system health and capacity trends.
• Support incident and problem management activities.
IP Address Management (IPAM)
• Design and manage Microsoft IPAM infrastructure.
• Administer IP address allocation, DNS, and DHCP integration.
• Develop IP management standards and documentation.
• Monitor IP utilization and capacity planning.
• Ensure accurate IP inventory and governance.
Print Services Management
• Design and manage enterprise print infrastructure.
• Administer print servers, print queues, and printer deployments.
• Implement printer deployment through Group Policies.
• Troubleshoot printing services and optimize print management processes.
• Ensure print security and availability.
Security & Compliance
• Implement Active Directory security controls and hardening standards.
• Conduct security reviews, audits, and risk assessments.
• Monitor privileged access and identity-related security threats.
• Support compliance initiatives including SOX, NERC, HIPAA, or other regulatory frameworks.
• Participate in vulnerability remediation and security incident response activities.
Automation & Scripting
• Develop automation solutions using PowerShell.
• Automate administrative, monitoring, and reporting tasks.
• Create reusable scripts and operational procedures.
• Drive infrastructure-as-code and identity automation initiatives.
Documentation & Governance
• Maintain architecture diagrams and technical documentation.
• Develop operational procedures, standards, and best practices.
• Participate in change management and architecture review boards.
• Provide technical guidance and mentorship to engineering and support teams