Senior Active Directory Architect; Hybrid; Local or Wilmington, DE

We are seeking a Senior Active Directory Architect to lead the design, security, optimization, and evolution of enterprise Active Directory infrastructure. This is a specialized Active Directory architecture position focused primarily on on-premises Active Directory, enterprise AD migrations, domain consolidation, and hybrid identity integration with Microsoft Entra .

The ideal candidate will bring deep technical expertise in Active Directory architecture, extensive experience leading complex migration initiatives, and the ability to establish secure, scalable, and reliable identity infrastructure across a large enterprise environment.

Important:
This is an Active Directory architecture position, not an IAM architecture position. Candidates must have substantial hands-on Active Directory expertise and a proven track record leading AD migrations and infrastructure initiatives. Experience with Microsoft Entra  broader Identity and Access Management (IAM) technologies is important, but Active Directory architecture must be the candidate's primary area of expertise.

Location Requirement: Candidates must already live within reasonable driving distance of one of the two work locations and be able to work onsite three days per week. Candidates planning to relocate to the area will not be considered.

• 10+ years of experience in Active Directory engineering, administration, and infrastructure, including at least 3 years in an architect, technical lead, or equivalent senior design role.
• Deep technical expertise in Active Directory Domain Services (AD DS), including forests, domains, trusts, sites, replication, and domain architecture.
• Extensive experience architecting, maintaining, and optimizing enterprise Active Directory environments.
• Demonstrated success leading large-scale Active Directory migrations, domain consolidations, or restructuring projects.
• Hands-on experience integrating on-premises Active Directory with Microsoft Entra  hybrid identity environments.
• Strong knowledge of DNS, DHCP, Group Policy, Active Directory Certificate Services (AD CS), and identity infrastructure dependencies.
• Experience with Power Shell scripting and automation for Active Directory administration, migration, or infrastructure management.
• Working knowledge of enterprise identity security principles, privileged access controls, and authentication technologies.
• Strong troubleshooting, documentation, communication, and technical leadership skills.
• Must currently reside within drivable commuting distance of Manassas, VA, or Wilmington, DE, and be able to work onsite three days per week. Relocation candidates will not be considered.
• A demonstrated history of stable employment and/or extended project engagements.

• Architect, maintain, and optimize enterprise Active Directory Domain Services (AD DS), including forests, domains, trusts, sites, and replication.
• Lead large-scale Active Directory migrations, domain consolidations, restructuring initiatives, and related infrastructure modernization projects.
• Design and implement hybrid identity integration between on-premises Active Directory and Microsoft Entra  Entra Connect and/or Cloud Sync.
• Develop and maintain Active Directory architecture standards, security baselines, operational procedures, and technical documentation.
• Design and manage Group Policy architecture, administrative delegation, role-based access control (RBAC), and privileged administrative models.
• Strengthen Active Directory security by identifying and mitigating risks associated with privilege escalation, Kerberoasting, pass-the-hash attacks, and other identity-based threats.
• Support identity lifecycle management, authentication, authorization, single sign-on (SSO), and multifactor authentication (MFA).
• Implement and manage Microsoft Entra , including Conditional Access, Privileged Identity Management (PIM), and application registrations.
• Collaborate with security, infrastructure, and compliance teams to support Zero Trust initiatives, audit requirements, and enterprise security objectives.
• Contribute to…