Technical Solutions Architect – Microsoft Infrastructure; TS​/SCI Clearance Scope Polygraph

Springfield, United States

Clearance Required: TS/SCI with Polygraph

Position Category: Software / Infrastructure Engineering

We are seeking a Microsoft Technical Solutions Architect to lead the design, modernization, security, and automation of enterprise on-premises Microsoft infrastructure. In this role, you will serve as the technical authority for Windows Server and Active Directory architecture, driving strategic technology decisions, engineering standards, and long-term infrastructure roadmaps.

The ideal candidate combines deep technical expertise with strong leadership skills and excels in complex, highly secure enterprise environments.

Define and maintain enterprise architecture standards for Microsoft technologies.

Develop technology roadmaps, modernization strategies, and future-state designs.

Lead architecture reviews, technical evaluations, and solution design efforts.

Serve as the primary Microsoft infrastructure Subject Matter Expert (SME) for technical planning and stakeholder engagements.

Design, implement, and support highly available enterprise Microsoft on-premises solutions, including:

Active Directory Domain Services (AD DS)

Windows Server

DNS, DHCP, Group Policy, and Kerberos

PKI / AD CS

File, storage, and remote desktop services

Design delegated administration, Role-Based Access Control (RBAC), and identity management solutions.

Create detailed architectural documentation, implementation plans, and operational standards.

Develop automation solutions using Power Shell and modern infrastructure automation tools.

Implement security best practices, privileged access controls, and DISA STIG compliance.

Lead vulnerability remediation, system hardening, and infrastructure security initiatives.

Troubleshoot and resolve complex infrastructure and performance issues.

Perform root cause analysis and drive continuous improvement.

Lead technical projects through the full system lifecycle and mentor engineering teams.

Collaborate with security, network, application, and operations teams to deliver enterprise-level solutions.

Candidates must have 16 years of combined professional experience and higher education , meeting one of the following criteria:

Doctorate + 8 years of relevant experience

Master’s Degree + 10 years of relevant experience

Bachelor’s Degree (Computer Science, IT, Engineering, or related field) + 12 years of relevant experience

Associate’s Degree + 14 years of relevant experience

High School Diploma / GED + 16 years of relevant experience

Experience: 7+ years designing and supporting enterprise Windows Server environments.

Core Expertise: Windows Server, Active Directory, Group Policy, DNS, DHCP, PKI/AD CS, enterprise Identity and Access Management (IAM), high-availability, and clustering technologies.

Identity & Access: Hands-on experience with Active Directory architecture, delegated administration, and RBAC design.

Automation: Advanced Power Shell scripting and infrastructure automation experience.

Configuration & Patching:

Experience with enterprise patch management, configuration management, and deployment automation.

Security & Compliance:

Compliance with DoD 8140 Information Assurance Technical (IAT) Level II .

Strong understanding of Microsoft security best practices, DISA STIGs, least-privilege access, and vulnerability remediation.

Experience with VMware, Hyper‑V, or comparable virtualization platforms.

Strong knowledge of networking fundamentals (TCP/IP, DNS,…