AD, Azure AD and PKI Architect
Core
Design, implement, operate, secure, and continuously improve enterprise identity and certificate services across on-premises and cloud platforms.
Role type
Senior IC Azure AD and PKI Architect
Builds
Resilient, scalable identity services and certificate management infrastructure for employees, customers, and partners
Domain
Identity and Access Management (IAM), Cloud Infrastructure, Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Active Directory (AD DS) engineering, Microsoft Entra ID (Azure AD) administration, PKI and Certificate Services, Hybrid Identity integration, PowerShell automation, Identity security hardening, Certificate lifecycle management, Conditional Access policies, Privileged Identity Management (PIM), Microsoft Graph API, Keyfactor ecosystem expertise
Preferred skills
Experience with multi-forest/multi-domain topologies, HSM management, SCIM provisioning, OAuth 2.0/OpenID Connect implementation, Incident response for identity services
Technologies
Active Directory, Microsoft Entra ID, Keyfactor Command, Keyfactor Orchestrators, Microsoft Active Directory Certificate Services (AD CS), PowerShell, Python, Bash, Microsoft Graph API, HSM, SAML, OAuth 2.0, OpenID Connect, SCIM
Responsibilities
Design and maintain enterprise Active Directory Domain Services including forests, domains, trusts, and Group Policy; Engineer hybrid identity integration between on-premises AD and Microsoft Entra ID; Manage the complete certificate lifecycle including issuance, renewal, revocation, and monitoring; Implement and maintain Conditional Access policies, multifactor authentication, and risk-based access controls; Build and maintain automation using PowerShell and REST APIs for identity administration and reporting; Lead remediation activities for identity risks and support security audits and incident investigations
Seniority
Senior, hands-on IC