> Markdown version of [/jobs/ext/3077844-active-directory-architect-windows-ad-iam-cloud-security](https://www.wearedevelopers.com/jobs/ext/3077844-active-directory-architect-windows-ad-iam-cloud-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Active Directory Architect - Windows AD / IAM / Cloud Security - **Company:** RealTek Consulting - **Location:** Irvine, United States - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Domain Controllers, Amazon Web Services, User Authentication, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cloud Engineering, System Configuration, Domain Name System (DNS), Event Logging, Identity and Access Management, Network Security, Lightweight Directory Access Protocols (LDAP), Windows Servers, Network Connections, Public Key Infrastructure, Information Technology Security Auditing, Service-Oriented Architecture, Service Pack, Security Information and Event Management, TCP/IP, Virtual Machines, Software Vulnerability Management, Private Cloud Environment, Data Logging, Transport Layer Security, Google Cloud, Cloud Platform System, HybridCloud, Firewalls (Computer Science), Cloud Migration, Devsecops - **Published:** September 25, 2026 - **Apply:** https://www.dice.com/job-detail/951ac5dc-64b2-4cca-98af-f245c09c3996 ## About the Role * Microsoft Active Directory * Domain Controllers * AD replication * AD schema * FSMO roles * Active Directory security * AD troubleshooting * AD migrations/upgrades * Windows Server 2019 / 2022 / 2025 DNS - Must Have * Microsoft DNS * A / CNAME / MX / TXT / SRV / NS / SOA records * PTR records * Reverse zones * AD-integrated DNS * DNS troubleshooting Security / IAM - Must Have * IAM * Identity and access management * Authentication / Authorization * Windows Server security * Vulnerability remediation * Security patching * Compliance * Security auditing Group Policy - Must Have * GPO creation and management * Security policies * GPO troubleshooting * Group Policy inheritance PKI / Certificates - Must Have * PKI * Digital certificates * SSL/TLS * SSL cipher suites * LDAPS * Certificate troubleshooting Networking - Must Have * TCP/IP * TCP / UDP * Active Directory ports * DNS networking * Basic network troubleshooting Cloud - Required * AWS / Azure / Google Cloud Platform * Cloud networking * IAM * Virtual Machines * Windows workloads in cloud environments * Cloud security Preferred Qualifications * Experience designing enterprise-scale AD architecture. * Experience with Active Directory modernization and migration projects. * Windows Server 2025 upgrade experience. * Experience with hybrid Active Directory environments. * Experience integrating on-premises AD with cloud identity platforms. * Experience with centralized logging/SIEM solutions. * Experience with cloud security architecture. * Experience with DevSecOps. * Experience working in highly regulated enterprise environments. * Strong documentation and architecture-design skills. ## Description Active Directory Architecture & Administration * Design, maintain, and support enterprise Microsoft Active Directory environments. * Architect secure and scalable Active Directory solutions aligned with enterprise security standards. * Manage Domain Controllers and Active Directory infrastructure. * Perform Domain Controller and AD schema upgrades/migrations, including upgrades from Windows Server 2019/2022 to Windows Server 2025. * Troubleshoot Active Directory replication and authentication issues. * Manage FSMO (Flexible Single Master Operations) roles. * Perform AD health checks and proactively identify infrastructure issues. * Support enterprise AD modernization and security initiatives. IAM & Security * Strong experience with Identity and Access Management (IAM). * Apply security principles related to: * Confidentiality * Integrity * Authorization * Accountability Implement and maintain secure identity and access controls. Support authentication, authorization, and directory security. Identify and remediate Active Directory security vulnerabilities. Develop security standards and controls for enterprise identity infrastructure. Windows Server Security & Vulnerability Management * Perform Windows Server vulnerability remediation. * Manage security patching and compliance activities. * Implement secure configuration standards across Windows Server environments. * Identify vulnerabilities and coordinate remediation activities. * Ensure systems meet enterprise security and compliance requirements. DNS Administration Strong hands-on experience managing Microsoft DNS, including: * A records * AAAA records * CNAME records * MX records * TXT records * SRV records * NS records * SOA records * PTR records * Reverse lookup zones * Create and manage reverse DNS zones. * Troubleshoot DNS resolution and Active Directory-integrated DNS issues. * Manage DNS dependencies associated with Active Directory services. Group Policy * Design, configure, and manage Group Policy Objects (GPOs). * Develop and implement enterprise security policies through GPO. * Troubleshoot GPO application and inheritance issues. * Manage policies related to authentication, security, system configuration, and compliance. PKI / Certificates / LDAPS * Manage enterprise PKI and digital certificates. * Configure and troubleshoot SSL/TLS certificates. * Manage SSL cipher suites associated with Active Directory. * Configure and troubleshoot LDAPS. * Troubleshoot certificate trust, expiration, authentication, and connectivity issues. * Ensure certificate infrastructure follows enterprise security standards. Windows Event Auditing & Centralized Logging * Configure Windows Event Auditing. * Monitor security and authentication events. * Configure forwarding of Windows audit events to centralized logging/SIEM platforms. * Troubleshoot security and authentication issues using Windows event logs. * Support security monitoring and compliance requirements. Networking Strong understanding of: * TCP/IP * TCP / UDP * DNS * Network connectivity * Firewall concepts * Active Directory network ports and protocols * Troubleshoot connectivity issues between Domain Controllers, clients, applications, and infrastructure services. * Understand network dependencies of Microsoft Active Directory services. * Troubleshoot authentication, LDAP/LDAPS, DNS, and directory connectivity issues. Cloud Architecture & Security AWS / Azure / Google Cloud Platform * Experience supporting Windows and Active Directory environments in cloud platforms. * Experience with AWS, Azure, and/or Google Cloud Platform. * Design secure cloud architectures aligned with enterprise security requirements. * Work with cloud-based virtual machines and Windows workloads. * Troubleshoot Windows VMs operating within cloud environments. * Understand cloud networking and security controls. * Apply IAM and access-control principles to cloud environments. Cloud Security Architecture * Create security blueprints and roadmaps for cloud adoption. * Design secure, scalable, and compliant cloud architectures. * Establish security policies, standards, and guidelines for: * Public Cloud * Private Cloud * Hybrid Cloud Assess cloud environments for vulnerabilities and security risks. Implement technical security controls including: * Network security * IAM * Encryption * Access controls Support compliance and risk-management initiatives. DevSecOps & Collaboration * Collaborate with IT, infrastructure, security, cloud, and development teams. * Embed security practices into application and infrastructure development. * Support DevSecOps initiatives. * Provide technical guidance on identity, security, and cloud architecture. * Translate business and security requirements into technical solutions. ## Related Videos - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Building Well-Architected applications](https://www.wearedevelopers.com/videos/691-building-well-architected-applications) - [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities) - [Azure-Well Architected Framework - designing mission critical workloads in practice](https://www.wearedevelopers.com/videos/1529-azure-well-architected-framework-designing-mission-critical-workloads-in-practice) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What Makes WeAreDevelopers World Congress Different From Every Other Tech Event?](https://www.wearedevelopers.com/magazine/701-what-makes-wearedevelopers-world-congress-different-from-every-other-tech-event)