Cloud Architect

Job Summary
Primary Skills (Must Have): Active Directory specialist including AD Domain migrations using Quest/ADMT or similar tools, DNS, DHCP, ADFS, Azure AD, DFS.
Secondary Skills (Good to Have): M365 and Wintel.
Key Responsibilities:
Design, configure, and maintain Active Directory services on Windows Server 2003/2008/2012/2016/2019 DCs.
Possess good knowledge of FIM and ADFS.
Experience with GPO consolidation, OU restructuring, AD Sites permissions, domain decommissioning, and sizing projects.
Handle domain remediation, Domain Controller builds, and functional level upgrades.
Strong experience in infrastructure assessment, solution design, architecture planning, and execution for Active Directory domain migrations.
Implement Azure AD Connect, Conditional Access policies, MFA, FIDO Authentication, and Windows Hello for Business.
Gather migration requirements and interact with multiple stakeholders and application owners.
Familiarity with Single Sign-On, directory schema replication, topology, RBAC, and user lifecycle.
Manage Identity and Access Management for Azure subscriptions, Azure AD, Azure AD Application Proxy, and Azure AD PTA.
Design and develop automation tools, scripts, and processes for administration and performance monitoring.
Sync objects, users, groups, and workstations in a hybrid approach.
Understand authentication protocols (SAML, WS-Fed, OAuth, OpenID) and design/implement ADFS.
Troubleshoot AD domain migration issues and suggest best practices.
Provide end-to-end support for migrating all directory objects.
Collaborate effectively in virtual teams and adapt to various client settings/platforms.
Utilize PowerShell and scripting for administrative tasks.
Certifications Required:
AZ-104: Microsoft Azure Administrator
MS-100: Microsoft 365 Identity and Services