Systems Admin III (Architect/engineering type role)

Title: Systems Admin III (Architect/engineering type role)Location: 100% (Remote) working CST hoursDuration: 12+ months ContractNoteOpen for C2C (W2 preferred).Only USC,GC.Interview: 2 rounds, 1 with the lead architects on the team, then final with AnjanJob DescriptionReason for opening: new project and new work to be handledIdeal CandidateStrong, hands-on architect with experience in engineering and design of Active Directory, Azure AD (or EntraID).Day To DayArchitect, design, and support a highly complex, enterprise-level Active Directory service in a hybrid on-prem and cloud-hosted environmentProvide expertise in solutioning and implementing AD/EntraID requirements, as well as architecting to automate and administer AD/EntraID compliance requirementsCollaborating with Solution Architects, application dev teams, cybersecurity teams, and infra teams to define the enterprise IAM strategyDrive planning and execution of directory Services roadmaps and technology enhancementsCreate and maintain standards surrounding documentation related to Directory Services processes, procedures, and infrastructureProvide level 3 production support to help diagnose and troubleshoot production issuesDevelop and deliver applicable documentation, training, and knowledge transfer to both internal and external stakeholdersMust Haves10+ years of experience in IT with a focus in security and IAM10+ years of experience with engineering and design of Active Directory5+ years of experience with engineering, design, and setting up Azure AD/EntraID5+ years of experience building and managing PKI solutionsTechnical Must Haves Experience developing, planning, and implementing a large-scale enterprise-level Active Directory and Azure AD/EntraID infrastructureDomain controller deploymentsSecuring ADAdvanced GPO settingsAdvanced replication managementAdvanced auditing techniquesExperience working with large-scale, enterprise-level LDAP/AD/Azure AD, EntraID environmentsExperience with enterprise security including TLS, SMTP over TLS, certificates, HSM, NIST standardsExperience building and managing PKI and supporting infrastructure including HSM, EKCLM, CA, etc.Non-tech must havesStrong communication both written and verbalSelf-starterThink strategically and suggest creative solutions