Active Directory Architect

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

Primary Responsibilities

• Design, review, and implement Active Directory Domain Controller architecture for scalability, security, and resilience
• Architect and manage Active Directory Domain Services (ADDS), including:
• Domain Controllers, DNS, DHCP, PKI, Certificate Management
• KMS, DFS, Sites and Services, Trusts (Domain and Forest)
• NTP configuration and synchronization
• Disaster Recovery services for AD objects
• Distributed Link Tracking
• Item resolution order/search suffix
• ADCS, NTLM Relaying, Coercion, and CAP bypasses
• Securing AD: Proactively identify and fix misconfigurations, excessive permissions, and vulnerabilities in hybrid AD environments
• Integrate EntraID (Azure AD) for hybrid identity managementOversee faxing solutions, SFTP platforms, and virtualization technologies
• Drive AI and automation initiatives for operational efficiency
• Lead upgrades and standardization of infrastructure technology tools
• Collaborate with cross-functional teams to ensure architectural alignment and compliance
• Maintain detailed documentation of architecture designs, standards, and operational procedures
• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so
  

• Bachelors degree in computer science, Engineering, or equivalent experience
• 8+ years of experience in compute architecture/implementation and infrastructure operations
• 5+ years of Network protocols experience
• 5+ years Kerberos, LDAP, DNS
• 5+ years of Microsoft Entra ID (Azure) and hybrid environments experience and hybrid identity management
• 5+ years Active Directory architecture, AD DS/CS, and security best practices experience
• Experience with data center design and optimization, virtualization (VMware), and automation tools
• Solid expertise in Active Directory architecture, including PKI, DNS, DHCP, DFS, Trusts, KMS, NTP, Disaster Recover, Resolution Order, and security hardening
• Proven excellent troubleshooting and problem-solving skills
• Proven solid communication and leadership abilities
  
  

• Microsoft Certified: Identity and Access Administrator Associate
• Familiarity with faxing solutions, SFTP platforms, and integration with enterprise systems