Directory Services AD Engineering Solutions Architect

About the opportunity:
We are seeking an experienced Active Directory (AD) and Entra ID engineer to supplement the existing team. Candidate must have a strong background in designing, building and maintaining complex, large scale and global identity directory services environments. For this engagement, “big picture thinking” for a large global enterprise will be required in addition to hands-on work. This is a 6-month remote contract opportunity.
Primary Duties:

• Conduct high level project and product design and create project charters 
• Review global directory services disaster recovery plans for gaps and define next steps 
• Engineer, deploy, operationalize, maintain, and support tools associated with AD & Entra ID 
• Contribute to the engineering configuration and support of AD & Entra ID as needed 
• Communicate service enhancements and operational efficiency directions, features and roadmaps aligned to the roadmap 
• Providing technical leadership to others with less knowledge or experience 
• Liaise with, train, and support operational teams 
• Assist in technology evaluations and guiding proof of concepts 
• Participate in solution design discussions 
• Architect and assist in engineering global AD domain consolidation project(s) 

Required Skills:

• Senior and experienced AD and Entra ID Engineer (5-7 years) with Large, Global Enterprise Experience 
• 5+ years’ experience in directory services solution architecting 
• Ability to architect solutions around the following technologies and tools; 

• Domain Controller Roles (GCS, Operational Masters, etc.) 
• Forest and Domain Design 
• DNS Infrastructure 
• OU Design 
• Site Topology, Replication and Knowledge Consistency Checking 
• Trusts (Transitive and Non-Transitive) 
• Group Policy Management 
• Sites & Services 
• AD Certificate Services 
• AD replication, SYSVOL, GPO, DNS, Digital Certificate, LDAP, Kerberos, Federation, AD Connect and NTP 
• Recovery 
• Domain Controller migrations 
• AD Domain Services 
• Directory Hardening 
• ADFS 
• Logging and Monitoring 

• Good understanding of AD / Entra ID Security 
• AD Support: Extensive experience in supporting and troubleshooting on-prem Active Directory services (Authentication, DFS, GPO, LDAP) 
• AD Security: Good understanding of AD security, vulnerabilities, and common safeguards 
• Tier-0 Security: Specific understanding of Tier-0 and identifying its security boundaries. 
• Domain Consolidation: Experience or enhanced understanding of consolidating a large enterprise AD forest 
• Cloud Interface: Familiar working with the AWS EC2 and Azure environments to build and support services 

Preferred Skills:

• Excellent interpersonal communication skills with strong spoken and written English. 
• Collaborative team worker – both in person and virtually using MS Teams or similar. 
• Excellent analytical skills. 
• Organizational skills with attention to detail. 
• Ability to leverage existing documentation. 
• Excellent documentation skills; demonstrated proficiency in Microsoft Office including Word, Excel and PowerPoint. 
• Business outcomes mindset. 
• Solid balance of strategic thinking with detail orientation. 
• Self-starter, ability to take initiative. 
• Flexibility to accommodate working across different time-zones. 

Required Education

• Bachelor's degree (BA/BS) from four-year college or university; or equivalent training, education, and work experience.
• Cybersecurity certifications such as CISSP, CISM, etc. 

Travel:

• Up to 10%

Qualifications:
To perform the job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed above are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Other duties, responsibilities and activities may change or be assigned at any time with or without notice.
EEO/AA Statement:
New Era Technology provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, national origin, religion, pregnancy, marital status, gender identity, age, physical or mental disability, or covered veteran status. 
In addition to federal law requirements, New Era Technology complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.