Active Directory Architect
On-siteHeredia, Heredia Province, Costa Rica
Job Summary
Assess the client's Active Directory and Azure/Entra ID deployment, including forest, site, domain, security group, and group policy design. Run PowerShell queries and SailPoint reports to gather statistics on users, accounts, and object membership. Review existing configurations, processes, and documentation to identify configuration and operational gaps, then prioritize them based on criticality and risk. Provide recommendations to address critical risks, suggest modifications to management processes, and determine resources, skills, and budget required for remediation. Leverage tools such as ADUC, ManageEngine, and StealthAUDIT for data-gathering activities.
Required Qualifications
- Strong experience as an Active Directory Architect
- Hands-on knowledge of Active Directory forest, site, domain, OU, security group, authentication, and group policy design
- Experience assessing Azure/Entra ID deployments and hybrid identity environments
- Ability to run and interpret PowerShell queries against AD domains to gather statistics on users, accounts, groups, OUs, computer objects, and related AD/Azure objects
- Experience using SailPoint reports for AD group and account ownership and membership analysis
- Ability to identify configuration and operational gaps and prioritize them based on criticality and risk
- Experience reviewing AD configurations, processes, and documentation
- Working knowledge of tools such as ADUC, ManageEngine, StealthAUDIT, and other AD scanning utilities
- Strong communication skills to document findings, recommendations, risks, and remediation plans for stakeholders
Desired Qualifications
- Prior experience with large-scale AD domain consolidation projects
- Experience supporting remediation roadmap planning for AD, Azure/Entra ID, and identity governance environments
- Familiarity with identity governance tools and reporting approaches, especially SailPoint
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.