Experienced hands-on Windows Server & Active Directory Hybrid Cloud Architect
Well familiar with FSMO (Flexible Single Master Operation) along with roles and functionality
AD experience along with management of forest, multi-forest, trees, and domain objects
Experience in DSC for maintaining consistent server configurations
Privileged Access Workstations (PAW) usage and management
Responsibilities
Lead the architectural design and implementation of Windows Server infrastructure and Active Directory services across hybrid cloud environments
Develop and maintain the technical roadmap for Windows Server infrastructure, considering business requirements, security compliance, and industry best practices
Design highly available and disaster recovery solutions for critical infrastructure components
Create and maintain infrastructure-as-code templates for automated deployments using tools like Azure ARM templates, PowerShell, and Terraform
Develop cloud migration strategies and roadmaps for legacy systems
Architect and oversee the implementation of complex Active Directory infrastructure, including multi-forest/multi-domain environments
Design and implement Azure AD Connect synchronization topologies and federation services
Manage the integration between on-premises Active Directory and Azure Active Directory
Develop and maintain Group Policy Objects (GPOs) and security baseline configurations
Implement Privileged Access Management (PAM) and Just-In-Time (JIT) access solutions
Design and implement role-based access control systems across hybrid environments
Architect Single Sign-On (SSO) solutions integrated with enterprise applications
Implement Privileged Identity Management for administrative access
Design conditional access policies for secure remote access
Implement advanced security measures including multi-factor authentication, Privileged Access Management, and Just-In-Time access
Ensure infrastructure compliance with financial industry regulations (SOX, PCI-DSS, GLBA)
Design and implement zero-trust security architecture
Maintain security controls for privileged access and identity management
Conduct regular security assessments and implement remediation measures
Design and implement PKI infrastructure and certificate management solutions
Lead Azure infrastructure design and implementation initiatives
Develop hybrid connectivity solutions using Azure ExpressRoute and Site-to-Site VPN
Design and implement hybrid backup and disaster recovery solutions
Optimize cloud resource utilization and cost management
Implement cloud security controls and monitoring solutions