Active Directory Architect

About the Role

We’re seeking an experienced Active Directory Engineer to design, secure, and maintain our enterprise directory infrastructure. The ideal candidate will have deep expertise in Active Directory and Azure AD
, with additional experience integrating and managing Okta for single sign‑on (SSO) and identity federation. You will be responsible for ensuring directory health, automating administrative functions, and advancing our hybrid identity and access strategy.

• Design, deploy, and maintain Active Directory forests, domains, and Group Policy Objects (GPOs).
• Manage domain controllers
  , DNS
  , DHCP
  , FSMO roles
  , AD replication
  , and trust relationships
  .
• Implement and maintain Azure AD synchronization and hybrid identity solutions.
• Integrate Okta with Active Directory for SSO, MFA, and lifecycle management.
• Develop and maintain Power Shell scripts to automate user provisioning, group management, and reporting.
• Conduct regular AD health checks
  , resolve replication and authentication issues, and ensure high availability.
• Apply security best practices, including auditing, privileged access controls, and zero‑trust principles.
• Support identity lifecycle processes — joiners, movers, leavers, and access reviews.
• Collaborate with Cybersecurity and Infrastructure teams to strengthen directory hardening and compliance posture.
• Maintain documentation, architecture diagrams, and operational runbooks for AD and IAM systems.

• Bachelor’s degree in Computer Science, Information Systems, or related field (or equivalent experience).
• 5+ years of experience designing and supporting Active Directory and Azure Active Directory in enterprise environments.
• Strong understanding of AD architecture
  , LDAP
  , Kerberos
  , and Group Policy
  .
• Hands‑on experience with Okta
  , Azure AD Connect
  , and Entra .
• Strong scripting and automation skills in Power Shell (required).
• Working knowledge of identity and access management (IAM), including SSO
  , MFA
  , and RBAC
  .
• Experience troubleshooting complex authentication and directory synchronization issues.

• Microsoft Certified:
  Identity and Access Administrator or Windows Server Hybrid Administrator Associate
  .
• Okta Certified Professional or Administrator certification.
• Experience with Privileged Access Management (PAM) solutions (Cyber Ark, Beyond Trust, etc.).
• Familiarity with PKI
  , certificate management
  , and secure LDAP
  .
• Understanding of Zero Trust and identity governance frameworks.
• Experience with AD disaster recovery
  , backups
  , and domain migrations
  .

• Strong analytical and problem‑solving abilities.
• Excellent written and verbal communication skills.
• Highly organized with attention to detail.
• Collaborative mindset and ability to work across infrastructure and security teams.

$/yr - $/yr

Mid‑Senior level

Full‑time

Information Technology

Staffing and Recruiting

Medical insurance, 401(k)