Senior Active Directory Architect / SME (Remote – U.S.)

Duration: 8–10 Weeks
Location: Remote (U.S. Based)
Employment Type: Contract

Security Requirement: Active Public Trust Clearance [Non-negotiable]

Position Overview

We are seeking a highly experienced Senior Active Directory Architect / Subject Matter Expert (SME) to lead a large-scale Active Directory modernization initiative within a federal enterprise environment.

This role will focus on upgrading and migrating six (6) Active Directory Domain Controllers from Windows Server 2012 R2 to Windows Server 2025, while transforming the infrastructure into a secure hybrid architecture spanning on-premises systems and Microsoft Azure IaaS.

The selected candidate will act as a technical leader and trusted advisor, guiding architecture design, migration strategy, validation, and documentation. This is a hands-off role, where internal teams will execute implementation under your expert direction.

Key Responsibilities

Active Directory Assessment & Planning

• Perform comprehensive assessments of existing AD environments (forests, domains, trusts, sites, replication, DNS, DHCP, GPOs, PKI).
• Identify dependencies, legacy constraints, risks, and migration challenges.
• Develop:
  • Migration strategies
  • Implementation roadmaps
  • Rollback plans
  • Maintenance schedules
• Facilitate stakeholder workshops across infrastructure, security, networking, and application teams.

Architecture & Design

• Design modern hybrid Active Directory architectures (on-prem + Azure IaaS).
• Define:
  • AD site topology
  • Replication strategies
  • DNS architecture
  • Network integration models
• Architect Azure environments including:
  • Virtual networks, subnets
  • Resource groups
  • Network security groups (NSGs)
  • Hybrid connectivity (VPN / ExpressRoute)
• Establish security baselines, compliance standards, auditing, and monitoring frameworks.

Migration & Modernization

• Lead AD schema upgrades and domain/forest functional level enhancements.
• Provide guidance for Windows Server 2025 Domain Controller deployments.
• Oversee:
  • FSMO role transfers
  • DNS and DHCP migrations
• Validate:
  • Authentication services
  • Group Policy processing
  • Replication health
  • DNS functionality

Legacy System Decommissioning

• Plan and guide retirement of Windows Server 2012 R2 Domain Controllers.
• Oversee:
  • Demotion procedures
  • Metadata and DNS cleanup
  • Post-migration validation
• Ensure minimal disruption to business operations.

Documentation & Knowledge Transfer

• Create:
  • Architecture diagrams
  • Runbooks
  • Migration documentation
  • As-built documentation
• Conduct final validation and health assessments.
• Deliver knowledge transfer sessions and operational guidance.

Required Qualifications

• 10+ years of enterprise experience in Active Directory administration, engineering, and architecture.
• Deep expertise in:
  • Active Directory Domain Services (AD DS)
  • Windows Server (2012 R2 through 2025)
  • DNS, DHCP, Group Policy, PKI
  • AD replication and Sites & Services
  • FSMO roles and DC migrations
• Strong experience with:
  • Hybrid identity and Azure infrastructure
  • AD security hardening and compliance
  • SYSVOL replication (DFSR/FRS)
  • Backup, disaster recovery, and rollback strategies
  • Enterprise networking (VPN, ExpressRoute, routing, firewalls)
• Proven track record leading large-scale infrastructure modernization projects.
• Excellent communication, documentation, and stakeholder management skills.

Preferred Qualifications

• Microsoft certifications (Azure, Identity, Windows Server).
• Experience in federal or highly regulated environments.
• Familiarity with security frameworks and compliance standards.
• Experience integrating AD with SIEM, monitoring, and logging platforms.

Additional Information

• This is a strategic advisory role, not a hands-on engineering position.
• Work will be performed remotely in collaboration with client technical teams.
• Opportunity to contribute to a high-impact enterprise modernization initiative.

For more details reach at resumes@navitassols.com.

About Navitas Partners, LLC: It is a certified WBENC and one of the fastest-growing healthcare staffing firms in the US providing Medical, Clinical and Non-Clinical services to numerous hospitals. We offer the most competitive pay for every position we cater. We understand this is a partnership. You will not be blindsided, and your salary will be discussed upfront.