Active Directory Architecture & DesignDesign and manage enterprise AD forests, domains, trusts, OU structures, site topology, Tiering Model in AD and Disaster Recovery PlanDefine and enforce AD naming conventions, delegation models, and role separation aligned with Tiering ModelArchitect high availability and disaster recovery for domain controllers and critical AD servicesDesign Group Policy (GPO) strategy aligned to security and operational best practicesLead domain controller lifecycle management, patching, and capacity planningOversee DNS, SYSVOL, replication health, and AD performance tuningTroubleshoot complex AD issues across multi‑domain and multi‑forest environmentsEstablish monitoring, alerting, and operational runbooksIdentify and remediate:Stale / inactive users and computer objectsOrphaned and over‑privileged accountsLegacy and unmanaged service accountsDefine and enforce account lifecycle and access review processesSupport service account migration, standardization, and credential hygienePerform AD security posture assessments and remediation planningImplement tiered administration, least privilege, and role‑based access controlsHarden AD against common attack vectors (Kerberos abuse, credential theft, lateral movement)Support privileged access design and secure admin workstation modelsDefine AD governance framework, policies, and technical standardsReview and approve changes impacting AD architecture and securityEnsure compliance with internal controls, audits, and regulatory requirementsMaintain architecture diagrams, design documents, and SOPsSupport domain consolidation, forest restructuring, and trust rationalizationProvide technical design inputs for hybrid identity and directory modernizationAssess AD readiness for integration with cloud identity platformsValidate designs and deliverables from system integrators or partner teamsAct as L4 escalation point for AD‑related issues and Mentor AD engineers and operations teamsCollaborate with security, infrastructure, and application teamsPresent technical findings and recommendations to senior stakeholdersRequired Skills & Experience8–12+ years of experience managing large‑scale on‑prem Active DirectoryDeep expertise in:AD DS, DNS, Group Policy, Sites & Services, ReplicationMulti‑domain and multi‑forest environmentsStrong PowerShell scripting for automation and reportingSolid understanding of AD security architecture and threat modelsProven experience delivering assessments, remediation plans, and architectural designsAbout Infosys Infosys is a global leader in next-generation digital services and consulting. We enable clients in 59 countries to navigate their digital transformation.With over four decades of experience in managing the systems and workings of global enterprises, we expertly steer clients, in 59 countries, as they navigate their digital transformation powered by cloud and AI. We enable them with an AI-first core, empower the business with agile digital at scale and drive continuous improvement with always-on learning through the transfer of digital skills, expertise, and ideas from our innovation ecosystem. We are deeply committed to being a well-governed, environmentally sustainable organization where diverse talent thrives in an inclusive workplace. Show more Show less