Active Directory (AD) Solution Architect_1

PROJECT DESCRIPTION: ITS serves all DSS program areas to fulfill their IT needs. To meet the business needs and ITS' workload, ITS is seeking qualified candidates in the areas of Database design, architecture, and development, including base definition, structure, documentation, long-range requirements, operational guidelines, and protection. Ensures accuracy and completeness of data in master files and various support tools, such as base dictionaries. Establishes and maintains security and integrity controls. Formulates and monitors policies, procedures and standards relating to database management. Proposes and implements enhancements that will improve the performance and reliability of various systems that ITS supports across DSS program areas.

Tasks & Duties

• Directory Services Management
• Administer and maintain Active Directory (AD) infrastructure.
• Monitor and manage AD replication and domain controllers.
• Implement and enforce group policies and access control policies.
• Perform regular security audits and vulnerability assessments.
• Manage user accounts, groups, and organizational units (OUs).
• Conduct regular backups and disaster recovery testing for AD.
• Integrate and manage authentication services, such as LDAP and Kerberos.
• Microsoft Entra ID Administration
• Configure and manage Microsoft Entra ID (formerly Azure Active Directory).
• Implement and manage identity and access management (IAM) policies.
• Monitor and secure Entra ID tenant against unauthorized access and threats.
• Configure single sign-on (SSO) and multi-factor authentication (MFA) solutions.
• Integrate on-premises AD with Microsoft Entra ID for hybrid identity solutions.
• Manage application registrations and API permissions.
• Perform regular security reviews and compliance audits for Entra ID.
• Security and Compliance
• Implement advanced security measures and monitor for potential threats.
• Ensure compliance with industry standards and regulatory requirements.
• Conduct regular security audits and penetration testing.
• Develop and maintain security policies and procedures.
• Performance Optimization and Reliability
• Conduct performance tuning and optimization of Exchange and Directory services.
• Implement high-availability and failover solutions.
• Monitor and troubleshoot performance issues across the infrastructure.
• Plan and execute system upgrades and migrations.
• Scalability and Futureproofing
• Design and implement scalable solutions to accommodate future growth.
• Stay updated with the latest technologies and industry’s best practices.
• Provide recommendations for future improvements and upgrades.
• Plan and execute infrastructure modernization projects.
• Support and Training
• Provide technical support and troubleshooting assistance.
• Develop and maintain documentation for all systems and procedures.
• Train in-house IT staff in the best practices and new technologies.
• Offer guidance and support during major incidents and outages.

Required Skills 

A minimum of 4 years of experience with the following skill sets:

• Directory Services Administration: Extensive experience with Active Directory (AD) infrastructure management and security auditing.
• Microsoft Entra ID Administration: Proficiency in configuring and managing Microsoft Entra ID (formerly Azure Active Directory), including IAM policies and hybrid identity solutions.
• Security and Compliance: Strong understanding of cybersecurity principles, implementing advanced security measures, and conducting compliance reviews.
• Performance Optimization and Reliability: Skills in performance tuning, high-availability solutions, and system upgrade planning.
• Scalability and Futureproofing: Ability to design and implement scalable IT solutions and stay updated with the latest technologies.
• Support and Training: Excellent problem-solving skills, documentation development, and experience in training IT staff.
• Communication and Project Management: Strong verbal and written communication skills, and project management expertise to oversee IT projects.