Senior Active Directory Architect at Granular Tek

Job description

We are seeking a Senior Active Directory Architect to own the design, security and evolution of an enterprise identity platform spanning on-premises Active Directory and Microsoft Entra ID. You will lead hybrid identity strategy, drive Identity and Access Management (IAM) initiatives, and serve as the senior technical authority for identity across the enterprise. • Architect, maintain and optimize enterprise AD forests, domains, trusts, sites and replication • Design and lead hybrid identity integration between on-premises AD and Microsoft Entra ID (Entra Connect / Cloud Sync) • Define IAM strategy covering authentication, authorization, provisioning and joiner/mover/leaver lifecycle • Implement and govern SSO, MFA and Conditional Access policies • Lead Privileged Access Management, tiered admin models and Entra PIM • Harden AD against threats such as Kerberoasting, pass-the-hash and privilege escalation • Manage Group Policy architecture, delegation models and RBAC • Lead AD migrations, consolidations and domain restructuring projects • Partner with Security, Compliance and Infrastructure teams on Zero Trust and audit requirements (SOX, HIPAA, NIST) • Mentor engineers, set architecture standards and document designs and runbooks

Requirements

Must-haves

Architect, maintain and optimize enterprise AD forests, domains, trusts, sites and replication
Design and lead hybrid identity integration between on-premises AD and Microsoft Entra ID (Entra Connect / Cloud Sync)
Define IAM strategy covering authentication, authorization, provisioning and joiner/mover/leaver lifecycle
Implement and govern SSO, MFA and Conditional Access policies
Lead Privileged Access Management, tiered admin models and Entra PIM
Harden AD against threats such as Kerberoasting, pass-the-hash and privilege escalation
Manage Group Policy architecture, delegation models and RBAC
Lead AD migrations, consolidations and domain restructuring projects
Partner with Security, Compliance and Infrastructure teams on Zero Trust and audit requirements (SOX, HIPAA, NIST)
Mentor engineers, set architecture standards and document designs and runbooks

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: careers-html
Effort: medium

Benefits

Benefits detected in the listing.

Vision