L4 Senior Active Directory Architect

JOB SUMMARY: Lead multi-forest Active Directory assessments and modernization as our Senior Assessment Specialist. Conduct eight-dimension discovery of forests domain controllers FSMO roles Group Policy Objects trusts ADCS and Entra Connect. Plan FSMO transfers legacy domain controller replacement runbooks and target-state designs including ADMT migrations and Entra Connect topologies. Author migration quotes and provide on-call support during implementations. This key role drives critical infrastructure changes and fosters growth in hybrid identity expertise on a supportive remote team.

RESPONSIBILITIES:

• Lead the embedded Active Directory assessment of complex multi-forest environments including six forests 93 domain controllers with several on unsupported operating systems 141 sites 28 trusts and over 426 Group Policy Objects while delivering a detailed Modernization Assessment.
• Execute the eight-dimension discovery process encompassing forests and domains sites subnets and replication domain controllers and FSMO roles trusts Group Policy Objects identity services such as ADCS Entra Connect and federation privileged access management and operational hygiene.
• Sequence FSMO transfer and seizure plans for forests where Forest or Domain level FSMO roles reside on unsupported OS domain controllers like Windows Server 2008 R2 and 2012 R2.
• Define the legacy domain controller replacement order and author comprehensive runbooks for replacing up to 13 end-of-support domain controllers.
• Design the target state architecture featuring forest consolidation roadmaps ADMT batch migration plans Entra Connect topology ADCS rationalization and trust simplification strategies.
• Prepare scoped Migration Quotes and follow-on Statements of Work including detailed effort estimates project duration and risk registers.
• Remain available on-call during legacy domain controller replacement waves and End of Support attestation processes to ensure seamless operations and quick issue resolution.

QUALIFICATIONS:

• 15 years enterprise Active Directory experience required.
• Bachelors degree in Computer Science or equivalent experience.
• Expert-level skills in multi-forest Active Directory FSMO and Entra Connect.
• Experience with ADMT batch migrations and legacy domain controller replacements.
• Knowledge of ADCS Kerberos ADFS federation and hybrid identity solutions.
• Excellent technical writing skills with ability to produce detailed assessments.