Cloud Solution Architect (v-CSA) - Active Directory & PKI

Job Title:

Job Description

• Design and implement enterprise Active Directory Domain Services (AD DS) architectures.
• Design and implement Public Key Infrastructure (PKI), Certificate Services, and certificate lifecycle management solutions.
• Support AD domain design, consolidation, modernization, and operational governance.
• Guide customers on secure identity architecture, authentication, authorization, and certificate-based trust models.

• Lead end-to-end delivery of AD and PKI engagements, including assessment, design, implementation, migration, and troubleshooting.
• Troubleshoot complex identity, authentication, DNS, Group Policy, and certificate-related issues.
• Deliver high-quality, repeatable technical engagements for enterprise and regulated customers.

• Act as a trusted technical advisor for customers and internal stakeholders.
• Translate business, compliance, and security requirements into practical technical architecture.
• Communicate clearly with technical teams, customer decision makers, CSAMs, partners, and engineering teams.

• Improve operational stability, monitoring, and reliability of identity and certificate services.
• Support disaster recovery, backup, and business continuity planning for AD and PKI services.
• Drive performance, maintainability, and operational maturity improvements.

• Guide customers on secure-by-design identity and certificate architectures.
• Support security hardening for Active Directory, Windows Server, PKI, and related infrastructure.
• Advise on access control, governance, compliance, and identity protection practices.

• Collaborate closely with CSAMs, partners, engineering teams, and other CSA communities to deliver customer outcomes.
• Contribute to reusable assets, delivery IP, technical guidance, and best practices for AD, PKI, and hybrid identity scenarios.
• Share knowledge with the broader team to strengthen depth in identity, security, and high-security customer delivery.

• Minimum 2 of the following 3 skills:
• Expert-level Active Directory Domain Services (AD DS), including architecture, operations, troubleshooting, and modernization.
• Expert-level Public Key Infrastructure (PKI) / Active Directory Certificate Services (AD CS), including certificate lifecycle, templates, enrollment, governance, and troubleshooting.
• Strong Windows Server knowledge, including DNS, Group Policy, authentication protocols such as Kerberos and NTLM, and security hardening.
• And:
• Knowledge of recent Windows Server functionalities and enhancements required.
• Strong ability to operate confidently across on-premises and hybrid identity environments.

• Microsoft Sentinel experience is preferred, especially where it supports identity threat detection, security monitoring, and high-security customer scenarios.
• Microsoft Defender for Identity or related identity threat detection experience.
• Conditional Access, Identity Protection, privileged access, or identity governance experience.
• PowerShell scripting and automation for AD, PKI, operational reporting, and repeatable delivery.

• Microsoft Entra ID and hybrid identity concepts.
• Microsoft Entra Connect / AD Connect and synchronization fundamentals.
• Identity federation such as ADFS and enterprise application / SSO integration.

• Proven experience working in environments with high security, compliance, confidentiality, or regulated customer requirements.
• Strong awareness of classified, regulated, sovereign, public sector, defense, or critical infrastructure IT environments where applicable.
• Ability to follow strict confidentiality expectations and demonstrate professionalism, integrity, reliability, and accountability.
• Ability to work effectively in complex enterprise IT landscapes and fast-moving customer situations.
• Where customer engagements require it, the candidate must be able to meet applicable security screening, background check, or clearance requirements.
• Finland citizenship and need to apply for security clearance

• Fluent English, spoken and written, is mandatory.
• Finnish is strongly preferred.
• Relevant Nordic language capability is considered a plus, depending on customer and country needs.
• Ability to work onsite as required for customer delivery, workshops, or high-security engagement needs.
• Flexibility to travel as needed.

• Experience working with enterprise customers in customer-facing technical delivery or advisory roles.
• Strong troubleshooting and problem-solving skills, especially in critical identity, authentication, and certificate-related situations.
• Excellent communication, presentation, and stakeholder engagement skills.
• Strong balance between deep technical expertise and business understanding.
• Ability to adapt quickly in changing environments and manage multiple stakeholders under pressure.
• Strong ownership mindset, delivery discipline, and ability to contribute to team knowledge and repeatable IP.

• Deep specialist role focused on Active Directory and PKI rather than broad generalist coverage.
• Combines architecture design, hands-on delivery, customer advisory, and high-security environment readiness.
• Provides an opportunity to strengthen team capability in identity security while expanding into adjacent areas such as Microsoft Sentinel and identity threat protection.

Location:

Language Requirements:

Time Type: