Active Directory Architect – Purview

This is a fully remote position, open to applicants in Texas.

📋 Description

• Evaluate the existing state of the client's Active Directory and Azure/Entra ID setup, encompassing forest design, site design, domain design, security group structure, deployment architecture, organizational unit (“OU”) design, authentication, and group policy design.

• Execute PowerShell queries on the client’s AD to extract relevant statistics regarding current AD and Azure objects, which include users, accounts, groups, organizational units (OUs), computer objects, and associated identity objects.

• Utilize SailPoint’s standard reports on AD connectivity to provide insights on group and account ownership as well as membership details.

• Analyze AD configurations, processes, and documentation to gain a comprehensive understanding of the client's current deployment and operational model.

• Identify gaps in configuration and operations within the client’s AD domains, infrastructure, architecture, and deployment.

• Rank identified gaps based on their criticality and associated risks.

• Offer recommendations to mitigate critical gaps and risks across AD and Entra ID environments.

• Discover and evaluate existing processes related to AD group management, AD group policy management, and AD account management.

• Recommend adjustments and enhancements to current processes and develop new processes as necessary.

• Ascertain the resources and skills required to implement remediation activities and achieve specified milestones.

• Provide a budget estimate for remediation efforts as outlined during the assessment phases.

• Utilize client tools such as ADUC (Active Directory Users & Computers), ManageEngine, StealthAUDIT, or other AD scanning utilities as needed for data-gathering efforts.

⛳️ Requirements

• Extensive experience as an Active Directory Architect, including domain consolidation, AD assessment, and enterprise identity infrastructure evaluation.

• Practical knowledge of Active Directory forest, site, domain, OU, security group, authentication, and group policy design.

• Experience in assessing Azure/Entra ID deployments and hybrid identity scenarios.

• Proficient in executing and interpreting PowerShell queries against AD domains to collect statistics on users, accounts, groups, OUs, computer objects, and related AD/Azure entities.

• Familiarity with SailPoint reports for analyzing AD group and account ownership and membership.

• Ability to identify and prioritize configuration and operational gaps based on their criticality and risk.

• Experience in reviewing AD configurations, processes, and documentation.

• Working knowledge of tools such as ADUC, ManageEngine, StealthAUDIT, and other AD scanning utilities.

• Capability to provide actionable recommendations, remediation planning inputs, resource assessments, skill requirements, and budget forecasts.

• Excellent communication skills to document findings, provide recommendations, outline risks, and develop remediation plans for stakeholders.

🏝️ Benefits

• Health insurance

• 401(k) matching

• Flexible working hours

• Paid time off

• Remote work options