Windows Systems Architect - Active Directory Infrastructure Systems Architect

The Microsoft Windows / Active Directory Infrastructure Systems Architect is a highly technical position responsible for the analysis, design, implementation, administration, security, maintenance and support of the department’s Windows Server / Active Directory-based environment. The environment is comprised of a multi-site, multi-forest Active Directory infrastructure, and supports Microsoft Exchange-based messaging services, Microsoft SharePoint collaboration services, Microsoft SQL Services, Single Sign-on services, File and Print Services, Microsoft O365, MS Teams. Microsoft-based configuration and software update management systems, systems performance management and infrastructure management tools. The Systems Architect will serve as a technical expert and will lead and work with users and collaborate with cross-functional teams.

Responsibilities

• Function as an SME for Active Directory / Windows environment, provide oversight on daily activities to set priorities, function as mentor, help with problem escalation, and communicate significant problems or issues to management.
• Function as a technical resource and integrator regarding Active Directory and Microsoft L3 issues to administrators, programmers, web developers, network security engineers, database analysts, network managers, and implementation teams.
• Function as an SME for Microsoft cloud environments (M365, MS Teams, Sharepoint, etc.) including configuration, integration, management, performance tuning and security.
• Participate in the identification of vulnerabilities and their mitigation and collaborate with security teams to conduct regular vulnerability assessments and implement necessary security measures.
• Participate in the analysis and design of new or existing infrastructure systems and services. Create and maintain comprehensive system documentation, including architecture diagrams, configurations, and operational procedures. Research, evaluate, recommend, and implement new technologies.
• Perform capacity planning, upgrades, and expansion of the environment.
• Maintain effective communications with vendors, peers, and clients in support of assigned projects.

Requirements

Required Knowledge, Skills, and Abilities: The individual should be familiar with standard operating procedures and best practices in the listed technology areas, and rely on experience and judgment to plan and accomplish goals:

• Windows Server and Active Directory
• Windows Server and Active Directory Security
• Windows DFS-N/DFS-R
• Active Directory integrated applications (includes single sign-on)
• Active Directory Group Policy to implement security standards on Domain Controllers, Domain Member Servers, and Domain Member Workstations
• Microsoft Azure Active Directory (AAD) and ADFS in hybrid environments
• Microsoft Azure Active Directory (AAD) Conditional Access Policies, AAD Connect
• DNS services • DHCP services • NTP services
• File and Print services
• Auditing technologies and tools, and provide reports as needed
• Implement security policies and procedures
• SCCM and WSUS, for both servers and desktops
• Virtualization
• High Availability / Disaster Recovery
• M365, MS Teams and MS Intune deployment, administration, and integrations
• MS Exchange Hybrid - L3 Management
• MS Sharepoint - L3 Management (cloud and on-prem)
• Microsoft CA - PKI
• Experience using Microsoft PowerShell across the different Microsoft ecosystem.
• Familiarity of the following third-party technologies: F5 LTM/GTM, RSA SecurID, CyberArk, Carbon Black App Control, and Ivanti RADIUS.

Minimum Education/Training Requirements: Bachelor's Degree in Computer Science or related field, or equivalent knowledge.

Minimum Experience: Eight years of related professional experience. Experience of Windows architecture in a multi-site company and project management is preferred.

Physical Capabilities: Ability to work at a computer for extended periods of time.

Required Licenses, Certification or Registration: Preferred. Advanced IT Industry certifications including, but not limited to, Microsoft technologies (cloud and on-prem), CompTIA, etc.

For consideration, please submit your resume as a MS Word attachment to The Consortium "Combining Talent with Technology" ;/p>