> Markdown version of [/jobs/ext/3536218-active-directory-ad-architect](https://www.wearedevelopers.com/jobs/ext/3536218-active-directory-ad-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Active Directory (AD) Architect - **Company:** Safran Usa, Inc. - **Location:** Denton, TX, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Access, Active Directory, Active Directory Federation Services, Microsoft Azure, Cyber Security, Dynamic Host Configuration Protocol, Disaster Recovery, Domain Name System (DNS), Federated Identity Management, Identity and Access Management, Lightweight Directory Access Protocols (LDAP), Microsoft Security Essentials, Public Key Infrastructure, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Zero Trust Network Access, Single Sign-On, Okta, System Availability, Information Technology, SailPoint - **Published:** October 1, 2026 - **Apply:** https://www.techcareers.com/job.asp?id=3413479267&tx=KR8181FFQ&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54 ## About the Role At Safran Electrical & Power, we value service-oriented team players who demonstrate strong interpersonal skills, a positive attitude, and the ability to adapt to our dynamic, innovative environment. Education and/or Experience ? Bachelor's degree in IT, Computer Science, Engineering, or related field. ? 8+ years supporting Microsoft Active Directory environments. ? 5+ years designing enterprise-scale Active Directory architectures. ? Experience with Microsoft Entra ID, ADFS, DNS, PKI, and Group Policy. ? Strong PowerShell automation skills. Knowledge/Skills ? In-depth knowledge of Active Directory, DNS, DHCP, GPOs, AD FS, Azure AD, and LDAP - Expert ? Experience with PowerShell scripting and automation tools - Advanced ? Understanding of identity federation, SSO, and conditional access policies - Expert ? Familiarity with Microsoft security baselines and compliance frameworks - Basic ? Experience with tools like ADManager Plus, Quest - Expert ? Exposure to Zero Trust, Privileged Access Management (PAM), or Identity Governance and Administration (IGA) - Advanced ? Experience with cloud identity platforms like Okta, Ping Identity, or SailPoint is a plus - Advanced ? Exposure or knowledge of Cybersecurity Maturity Model Certification (CMMC), NIST SP 800-171, NIST SP 800 172 a plus - Advanced ? Strong analytical and troubleshooting skills - Advanced ? Experience with Microsoft Entra ID, ADFS, DNS, PKI, and Group Policy - Expert Candidate skills & requirements ? Strong PowerShell automation skills - Advanced Certificates, Licenses, Registrations ? Microsoft Certifications such as MCSA/MCSE, Microsoft Certified: Identity and Access Administrator Associate, or Azure Solutions Architect is a plus, * Innovative & Curious * Collaborative & Inclusive * Committed to Safety * Trustworthy * Results Focused * Driven to Excellence * Powered by Teamwork ## Description HERE, WE CRAFT EXCELLENCE TOGETHER. At Safran, we believe in sustainable career journeys, collaboration as a cornerstone of innovation, and the freedom to explore diverse career paths. We are proud to be featured in TIME's World's Best Companies 2025 ranking, securing 2nd place in the Aerospace & Defense sector and 52nd overall. As an Active Directory Architect, you'll contribute to meaningful projects that shape the future of aerospace. This position contributes to our vision by ? Design and maintain enterprise Active Directory architecture, including forests, domains, trusts, organizational units, and sites. ? Develop identity management roadmaps aligned with business and cybersecurity objectives and compliance to NIST and CMMC standards. ? Architect and manage solutions Active Directory. ? Lead Active Directory security assessments and remediation efforts. ? Ensure high availability, disaster recovery, and business continuity for directory services. ? Serve as the subject matter expert for identity services. ? Designs, implements, and maintains Active Directory Domain Services (AD DS) across multi-site environments; ? Manages Group Policy Objects (GPOs), Organizational Units (OUs), and user/computer accounts; ? Monitors and optimizes Active Directory replication, performance, and health; ? Implements and manages Active Directory Federation Services (AD FS) and Azure AD integration; ? Configures and troubleshoots DNS and DHCP services related to AD; ? Ensures security best practices for AD infrastructure, including role-based access control, auditing, and hardening; ? Develops and maintains PowerShell scripts for automation of routine AD tasks; ? Collaborates with the security and compliance teams on identity governance and access control; ? Supports hybrid identity infrastructure (on-prem and cloud); ? Participates in disaster recovery planning and backup strategies for directory services; ? Performs domain migrations, trust configurations, and forest design as needed; ? Adheres to safe work practices and contributes to the evolution of the health, safety, and environmental program and culture; ? Regular, predictable attendance is required; ? Other duties may be assigned. ? Develops and maintains PowerShell scripts for automation of routine AD tasks; ? Participates in disaster recovery planning and backup strategies for directory services; ? Performs domain migrations, trust configurations, and forest design as needed; ? Designs, implements, and maintains Active Directory Domain Services (AD DS) across multi-site environments; ? Manages Group Policy Objects (GPOs), Organizational Units (OUs), and user/computer accounts ## Related Videos - [Going Beyond Passwords: The Future of User Authentication](https://www.wearedevelopers.com/videos/714-going-beyond-passwords-the-future-of-user-authentication) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [SSO with Ethereum and Next JS](https://www.wearedevelopers.com/videos/288-sso-with-ethereum-and-next-js) - [Keycloak case study: Making users happy with service level indicators and observability](https://www.wearedevelopers.com/videos/1599-keycloak-case-study-making-users-happy-with-service-level-indicators-and-observability) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Companies to Work For in Paris: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/190-best-companies-to-work-for-in-paris-top-25-companies-in-2023) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Best Companies to Work For in France: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/189-best-companies-to-work-for-in-france-top-25-companies-in-2023) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)