Senior Active Directory Architect

Booker DiMaio

. Architect, maintain, and optimize enterprise Active Directory Domain Services, including forests, domains, trusts, sites, and replication .

Posted 10/28/2026contractManassas • Virginia • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Expertise in architecting and optimizing Active Directory Domain Services, including hybrid identity integration with Microsoft Entra ID. Proven ability to lead large-scale migrations and implement security measures for identity management.

Highest-signal resume keywords

Active Directory Domain Services (AD DS)Hybrid Identity IntegrationPowerShell ScriptingIdentity GovernanceMicrosoft Entra ID

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Active Directory EngineeringDomain ArchitectureGroup Policy ManagementIdentity Lifecycle ManagementAuthentication TechnologiesPrivileged Access ManagementRisk MitigationInfrastructure ModernizationTechnical DocumentationOperational Procedures

Soft Skills

Technical LeadershipMentoringCollaborationCommunication

Tools & Technologies

Microsoft Entra ConnectCloud SyncSailPointOktaCyberArkBeyondTrust

Certifications & Qualifications

SC-300AZ-104AZ-305CISSPCISM

Industry Keywords

Zero TrustRegulated EnvironmentsIdentity Security PrinciplesPrivileged Identity ManagementAudit Requirements

Tech Stack

Tools & technologies

CloudDNS

About the role

Key responsibilities & impact

Architect, maintain, and optimize enterprise Active Directory Domain Services, including forests, domains, trusts, sites, and replication
Lead large-scale Active Directory migrations, domain consolidations, restructuring initiatives, and infrastructure modernization projects
Design and implement hybrid identity integration between on-premises Active Directory and Microsoft Entra ID using Entra Connect and/or Cloud Sync
Develop and maintain Active Directory architecture standards, security baselines, operational procedures, and technical documentation
Design and manage Group Policy architecture, administrative delegation, role-based access control, and privileged administrative models
Identify and mitigate risks associated with privilege escalation, Kerberoasting, pass-the-hash attacks, and other identity-based threats
Support identity lifecycle management, authentication, authorization, single sign-on, and multifactor authentication
Implement and manage Microsoft Entra ID capabilities, including Conditional Access, Privileged Identity Management, and application registrations
Collaborate with security, infrastructure, and compliance teams on Zero Trust initiatives, audit requirements, and enterprise security objectives
Contribute to privileged access management and identity governance initiatives
Develop PowerShell scripts and automation to improve identity administration, migration execution, security, and operational efficiency
Provide technical leadership, mentor engineering teams, and communicate architectural decisions to stakeholders and leadership

Requirements

What you’ll need

10+ years of experience in Active Directory engineering, administration, and infrastructure
At least 3 years in an architect, technical lead, or equivalent senior design role
Deep technical expertise in Active Directory Domain Services (AD DS), including forests, domains, trusts, sites, replication, and domain architecture
Extensive experience architecting, maintaining, and optimizing enterprise Active Directory environments
Demonstrated success leading large-scale Active Directory migrations, domain consolidations, or restructuring projects
Hands-on experience integrating on-premises Active Directory with Microsoft Entra ID in hybrid identity environments
Strong knowledge of DNS, DHCP, Group Policy, Active Directory Certificate Services (AD CS), and identity infrastructure dependencies
Experience with PowerShell scripting and automation
Working knowledge of enterprise identity security principles, privileged access controls, and authentication technologies
Must currently reside within drivable commuting distance of Manassas, VA, or Wilmington, DE
Must be able to work onsite three days per week
Relocation candidates will not be considered
Demonstrated history of stable employment and/or extended project engagements
Bachelor's degree in Computer Science, Information Systems, or a related discipline, or equivalent practical experience is preferred
Microsoft certifications such as SC-300, AZ-104, or AZ-305 are preferred
Security certifications such as CISSP or CISM are preferred
Experience with identity governance or privileged access management platforms such as SailPoint, Okta, CyberArk, or BeyondTrust is preferred
Experience supporting regulated environments is preferred

Benefits

Comp & perks

Contract duration of 12+ months
Hybrid work arrangement
Video interview process
Growth opportunities
Professional development through technical leadership and mentoring opportunities