Infrastructure Architect Executive

• Multi-Factor Authentication (MFA) enforcement

The Infrastructure Architect Executive, designs and defines reference infrastructure architectures and components.

Hybrid 2:
This role requires associates to be in-office 3 days per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workplace. Alternate locations may be considered if candidates reside within a commuting distance from an office.

Please note that per our policy on hybrid/virtual work, candidates not within a reasonable commuting distance from the posting location(s) will not be considered for employment, unless an accommodation is granted as required by law.

• Prepares business case, lobbies to secure funding for, and drives implementation of new technologies based upon business value drivers and return on investment.
• Owns overall platform architecture vision and ensures specific components are appropriately designed and leveraged; drives pieces of the holistic vision of Enterprise Architecture.
• Leads the construction of infrastructure architecture components.
• Leads the definition of business and IT recovery operating environment.
• Leads infrastructure architecture vision and ensures specific components are appropriately designed and leveraged.
• Anticipates areas where architecture standards may need to be developed and defines those standards that are in-line with customer, IT and industry standards.
• Drives solutions which address service requirements, component capacities and loads for planned business growth.
• Defines systems and technical architectures for new strategic initiatives; assures compliance to the EA and domain roadmaps using cost effectiveness, business value and competitiveness arguments.
• Develop and maintain the enterprise Active Directory (AD) and Microsoft Entra  roadmap.
• Design scalable, secure, resilient, and highly available identity solutions.
• Lead identity modernization initiatives, including:
• Tiered administration modeling
• Hybrid identity implementations
• Cloud adoption
• Directory consolidation
• Establish and maintain architectural standards, governance models, and operational frameworks.
• Support identity integration efforts for mergers and acquisitions (M&A).
• Partner with Identity and Access Management (IAM) teams to ensure enterprise identity standards are implemented and enforced.
• Mentor and provide technical leadership to engineering and operations teams.
• Lead major incident response and root cause analysis (RCA) for identity-related services.

• Forest and domain architecture
• Organizational Unit (OU) design and management
• Group Policy Objects (GPOs)
• LDAP services
• Trust relationships
• Public Key Infrastructure (PKI) and certificate services
• Federation technologies
• Kerberos authentication
• Tiered administration and privileged access strategies
• Directory replication, resiliency, and overall operational health

• Microsoft Entra Connect and Cloud Sync
• Privileged Identity Management (PIM) and privileged access management
• Just-in-Time (JIT) administration
• Zero Trust architecture and principles
• Multi-Factor Authentication (MFA) enforcement
• Conditional Access policies

• Conduct security assessments, audits, and remediation activities.
• Support compliance initiatives, including SOX, HIPAA, PCI, and GDPR.
• Develop Power Shell automation and scripting solutions to improve operational efficiency.
• Create and maintain technical documentation, standards, and operational procedures.
• Effectively communicate with stakeholders and deliver executive-level presentations.