Active Directory_ Architect Identity & Access JD

Key Responsibilities

IAM Architecture & Design

• Design and implement IAM solutions, including Active Directory (AD), Azure AD, Okta, and hybrid environments
• Define identity lifecycle management, SSO, MFA, privileged access management (PAM), and access recertification processes
• Lead AD migration, consolidation, and transformation projects across forests and domains
• Design file and print services, DFS environments, and perform large-scale migrations

Solution Deployment & Integration

• Integrate IAM solutions with enterprise applications, Azure, Office 365, and other cloud/on-prem systems
• Configure Azure AD Conditional Access, MFA, SSPR, and role-based access controls (RBAC/ABAC)
• Implement AD integration with Identity Management solutions (MS FIM, MIM)
• Support application migrations using tools like AppZero, Factfinder, Change Base, Quest, ADMT, and Sharegate

Governance, Security & Compliance

• Establish IAM policies, standards, and procedures to ensure compliance with GDPR, HIPAA, and PCI DSS
• Conduct risk assessments and audits to identify vulnerabilities and enforce least privilege principles
• Maintain DR plans, backup strategies, and high-availability configurations

Technical Leadership & Project Management

• Review and validate HLD/LLD, project timelines, milestones, and risk mitigation plans
• Mentor junior engineers and provide technical guidance on IAM and Wintel technologies
• Participate in presales, RFP/RFI evaluations, and client consultations
• Document designs, migration strategies, and operational procedures

Wintel & AD Infrastructure Expertise

• Administer and optimize Windows Server environments (2003latest)
• Manage AD replication, authentication, authorization, Group Policies, AD LDS/ADAM, DNS, DHCP, PKI, Hyper-V clusters, IPAM, and RADIUS
• Perform performance tuning, capacity planning, and resource optimization

Automation & Tooling

• Leverage PowerShell scripting and automation tools to streamline migrations and administration
• Implement automated workflows for user provisioning, de-provisioning, and access management