Infrastructure Architect

Job Title :
Active Directory Infrastructure Architect Experience : 12 to 15 Years Location :
Plymouth, MA (Onsite) Duration :
Long Term Contract Job Summary

We are seeking a highly skilled and hands-on Active Directory Infrastructure Architect to lead the migration, modernization, and upgrade of our enterprise Active Directory (AD), DNS, and DHCP infrastructure.

The ideal candidate will possess deep technical expertise in Microsoft identity and infrastructure services and have proven experience designing, implementing, and migrating complex enterprise environments.

This role requires an architect who can define target-state architecture, drive migration strategies, ensure security compliance, and provide technical leadership throughout the transformation lifecycle.

• Design, architect, and implement enterprise-grade Active Directory solutions.
• Develop target-state architecture for Active Directory, DNS, and DHCP environments.
• Assess existing infrastructure and recommend modernization strategies.
• Define standards, governance, and best practices for identity and infrastructure services.

• Lead end-to-end migration and upgrade projects for:
• Active Directory Forests and Domains
• Domain Controllers
• DNS Infrastructure
• DHCP Services
• Develop migration plans, rollback strategies, and risk mitigation approaches.
• Perform infrastructure consolidation, domain restructuring, and modernization initiatives.
• Coordinate and execute cutover activities with minimal business disruption.

• Implement Microsoft security best practices for Active Directory.
• Strengthen identity security through privileged access management and tiered administration.
• Conduct AD health assessments, security audits, and remediation activities.
• Ensure compliance with organizational and regulatory requirements.

• Provide Level 3 and architectural support for complex infrastructure issues.
• Analyze and resolve replication, authentication, DNS, and DHCP-related problems.
• Establish monitoring, alerting, backup, and disaster recovery processes.
• Optimize performance, availability, and scalability of directory services.

• Collaborate with infrastructure, cloud, networking, cybersecurity, and application teams.
• Present architectural recommendations to leadership and technical stakeholders.
• Lead technical workshops and knowledge transfer sessions.
• Create and maintain architecture diagrams, design documents, and operational procedures.

• Microsoft Active Directory Domain Services (AD DS)
• DNS and DHCP Administration
• Active Directory Federation Services (ADFS)
• Group Policy Management
• Active Directory Sites and Services
• Active Directory Replication
• Power Shell Scripting and Automation
• Windows Server Administration (2016/2019/2022)

• Hybrid Identity Solutions
• Single Sign-On (SSO)

• Active Directory Migration
• Forest and Domain Consolidation
• Domain Controller Upgrade and Migration
• DNS and DHCP Migration
• Identity Modernization Initiatives

• Active Directory Security Hardening
• Privileged Access Management
• Identity Governance
• Security Baseline Implementation
• Disaster Recovery and Business Continuity Planning

• Bachelor's degree in Computer Science, Information Technology, Engineering, or related field.
• 10 to 14 years of experience in Microsoft Infrastructure and Identity Management.
• Minimum 7+ years of experience in designing and architecting enterprise Active Directory environments.
• Proven experience leading large-scale AD, DNS, and DHCP migration projects.
• Strong Power Shell scripting and automation experience.

• Microsoft Certified:
  Identity and Access Administrator Associate
• Microsoft Certified:
  Azure Solutions Architect Expert
• Microsoft Certified:
  Windows Server Hybrid Administrator Associate