Microsoft Technical Solutions Architect; IT SE III); Government

AT&T Global Public Sector is a trusted provider of secure, IP enabled, cloud-based, network solutions and professional services to the Federal Government. We are dedicated to recruiting, developing and empowering a diverse, high-performing workforce that is passionate about what they do, committed to our shared values and dedicated to our customers’ mission.

Our National Security Team supports the intelligence community, providing, operating, and assuring critical voice, video and collaboration services for the full spectrum of operations.

We are seeking a Microsoft Solutions Architect
to lead the design, modernization, security, and automation of enterprise on-prem Microsoft infrastructure. This role serves as the technical authority for Windows Server and Active Directory architecture, driving strategic technology decisions, engineering standards, and long-term infrastructure roadmaps.

This is a full-time onsite role based in the location(s) posted and is performed from the designated work location five days per week. No relocation is offered. Work to be performed at a government customer site in Chantilly, VA.

• Define and maintain enterprise architecture standards for Microsoft technologies.
• Develop technology roadmaps, modernization strategies, and future-state designs.
• Lead architecture reviews, technical evaluations, and solution design efforts.
• Serve as the primary Microsoft infrastructure SME for technical planning and stakeholder engagements.

• Design, implement, and support highly available Microsoft on-prem solutions, including:
  • Active Directory Domain Services (AD DS)
  • Windows Server
  • DNS, DHCP, Group Policy, and Kerberos
  • PKI/AD CS
  • File, storage, and remote desktop services
• Design delegated administration, RBAC, and identity management solutions.
• Create detailed architectural documentation, implementation plans, and operational standards.

• Develop automation solutions using Power Shell and modern infrastructure automation tools.
• Implement security best practices, privileged access controls, and DISA STIG compliance.
• Lead vulnerability remediation, system hardening, and infrastructure security initiatives.

• Troubleshoot and resolve complex infrastructure and performance issues.
• Perform root cause analysis and drive continuous improvement.
• Lead technical projects through the full system lifecycle and mentor engineering teams.
• Collaborate with security, network, application, and operations teams to deliver enterprise solutions.

Required Clearance: TS/SCI with polygraph. (#ts/sci) (#polygraph)

· Candidate must have 16 years of experience that can be a combination of work history and education. This equates to a Doctorate and 8 years, master’s and 10 years, bachelor’s and 12 years, associates and 14 years or HS diploma and 16 years.

• Bachelor's degree in Computer Science, Information Technology, Engineering, or related field (or equivalent experience).
• 7+ years designing and supporting enterprise Windows Server environments.

• Deep expertise in:
  • Windows Server
  • Active Directory
  • Group Policy
  • DNS and DHCP
  • PKI/AD CS
  • Enterprise identity and access management
  • High-availability and clustering technologies
• Experience with Active Directory architecture, delegated administration, and RBAC design.
• Advanced Power Shell scripting and infrastructure automation experience.
• Experience with enterprise patch management, configuration management, and deployment automation.
• Strong understanding of Microsoft security best practices, DISA STIGs, least-privilege access, and vulnerability remediation.
• Experience with VMware, Hyper-V, or comparable…