Position: Senior Active Directory Architect
Location: Wilmington, DE or Manassas, VA (Hybrid – 3 days onsite per week)
Duration: 1+ year contract
Position Overview
We are looking for a Senior Active Directory Architect with deep expertise in enterprise Active Directory architecture, security, migrations, and hybrid identity integration. This is primarily an Active Directory architecture role, not an IAM Architect position.
Candidates must be within 2 hours of Wilmington, DE or Manassas, VA and available to work onsite 3 days per week. Strong candidates with certifications, long-term project experience, and recent local projects are highly preferred.
Required Skills:
- 10+ years of Active Directory engineering experience, including 3+ years in an Architect/Lead role.
- Expertise in AD DS, forests, domains, trusts, replication, DNS, DHCP, Group Policy, and AD Certificate Services.
- Proven experience leading large-scale Active Directory migrations, consolidations, and domain restructuring.
- Microsoft Entra ID, Entra Connect/Cloud Sync, Conditional Access, PIM, and hybrid identity.
- IAM fundamentals: SSO, MFA, SAML, OAuth 2.0, OpenID Connect, Kerberos, and LDAP.
- PAM/Identity Governance tools: SailPoint, Okta, CyberArk, or BeyondTrust.
- PowerShell scripting and automation; Microsoft Graph PowerShell preferred.
- Active Directory security hardening, privileged access models, RBAC, and Zero Trust.
Preferred Qualifications:
- Microsoft certifications: SC-300, AZ-104, or AZ-305.
- CISSP or CISM certification.
- Experience with Microsoft Defender for Identity, Microsoft Sentinel, and Entra ID Governance.
- Financial services, healthcare, or other regulated-industry experience.
- Bachelor's degree in Computer Science, Information Systems, or equivalent experience.
- Mandatory Submission Requirements
