Technical Solutions Architect – Microsoft Infrastructure (Current TS/SCI Clearance with a Full Scope Polygraph Required)

Location

Springfield, VA

Job Type: Full-Time

Clearance Required: TS/SCI with Polygraph

Position Category: Software / Infrastructure Engineering

Job Overview

----------------

We are seeking a Microsoft Technical Solutions Architect to lead the design, modernization, security, and automation of enterprise on-premises Microsoft infrastructure. In this role, you will serve as the technical authority for Windows Server and Active Directory architecture, driving strategic technology decisions, engineering standards, and long-term infrastructure roadmaps.

The ideal candidate combines deep technical expertise with strong leadership skills and excels in complex, highly secure enterprise environments.

Key Responsibilities

------------------------

Architecture & Strategy

• Define and maintain enterprise architecture standards for Microsoft technologies.
• Develop technology roadmaps, modernization strategies, and future-state designs.
• Lead architecture reviews, technical evaluations, and solution design efforts.
• Serve as the primary Microsoft infrastructure Subject Matter Expert (SME) for technical planning and stakeholder engagements.

Infrastructure Engineering

• Design, implement, and support highly available enterprise Microsoft on-premises solutions, including:

+ Active Directory Domain Services (AD DS)

+ Windows Server

+ DNS, DHCP, Group Policy, and Kerberos

+ PKI / AD CS

+ File, storage, and remote desktop services

• Design delegated administration, Role-Based Access Control (RBAC), and identity management solutions.
• Create detailed architectural documentation, implementation plans, and operational standards.

Automation & Security

• Develop automation solutions using PowerShell and modern infrastructure automation tools.
• Implement security best practices, privileged access controls, and DISA STIG compliance.
• Lead vulnerability remediation, system hardening, and infrastructure security initiatives.

Technical Leadership

• Troubleshoot and resolve complex infrastructure and performance issues.
• Perform root cause analysis and drive continuous improvement.
• Lead technical projects through the full system lifecycle and mentor engineering teams.
• Collaborate with security, network, application, and operations teams to deliver enterprise-level solutions.

Qualifications & Skill Requirements

----------------------------------------

Education & Experience Requirements

Candidates must have 16 years of combined professional experience and higher education, meeting one of the following criteria:

• Doctorate + 8 years of relevant experience
• Master’s Degree + 10 years of relevant experience
• Bachelor’s Degree (Computer Science, IT, Engineering, or related field) + 12 years of relevant experience
• Associate’s Degree + 14 years of relevant experience
• High School Diploma / GED + 16 years of relevant experience

Essential Technical Qualifications

• Experience: 7+ years designing and supporting enterprise Windows Server environments.
• Core Expertise: Windows Server, Active Directory, Group Policy, DNS, DHCP, PKI/AD CS, enterprise Identity and Access Management (IAM), high-availability, and clustering technologies.
• Identity & Access: Hands-on experience with Active Directory architecture, delegated administration, and RBAC design.
• Automation: Advanced PowerShell scripting and infrastructure automation experience.
• Configuration & Patching: Experience with enterprise patch management, configuration management, and deployment automation.
• Security & Compliance:

+ Compliance with DoD 8140 Information Assurance Technical (IAT) Level II.

+ Strong understanding of Microsoft security best practices, DISA STIGs, least-privilege access, and vulnerability remediation.

• Virtualization & Networking:

+ Experience with VMware, Hyper-V, or comparable virtualization platforms.

+ Strong knowledge of networking fundamentals (TCP/IP, DNS, VLANs, firewalls, network segmentation).

+ Proven ability to troubleshoot complex Windows, networking, virtualization, and storage environments.

Professional Skills

• Strong analytical and problem-solving abilities.
• Excellent communication and technical documentation skills.
• Demonstrated ability to lead complex technical initiatives and work independently in a fast-paced environment.

Desired / Preferred Skills

------------------------------

• Experience with multi-site and geographically distributed Active Directory environments.
• Experience with domain consolidations, migrations, and infrastructure modernization initiatives.
• Experience with Ansible, Terraform, or similar infrastructure-as-code platforms.
• Experience with Virtual Desktop Infrastructure (VDI), FSLogix, Dynamic Environment Manager (DEM), and enterprise desktop engineering.
• Experience integrating Windows and Red Hat Enterprise Linux (RHEL) environments.
• Experience with enterprise backup, disaster recovery (DR), and business continuity solutions.
• Knowledge of Zero Trust architecture and cybersecurity frameworks.
• Experience leading architecture reviews, proof-of-concept (PoC) efforts, and large-scale infrastructure transformation programs.
• Experience working in highly regulated enterprise or government environments.

Compensation & Benefits

----------------------------

• Salary Range: $132,000 – $149,000 (commensurate with experience, skills, education, and specific role responsibilities).
• Comprehensive Benefits Package: Medical, dental, and vision coverage, short-term/long-term disability, basic life insurance, 401(k) with company match, paid time off (PTO), paid holidays, paid parental leave, and tuition reimbursement.