Q1 Technologies is hiring: AD Architect in Aurora

Job Description: **Please strictly adhere to the following resume naming convention:
ALL CAPS, NO SPACES B/T UNDERSCORES

PTN_US_GBAMSREQID_CandidateBeelineID
i.e. PTN_US_9999999_SKIPJOHNSON0413

Bill Rate: $75- $80
MSP Owner: Subhashree samal
Location: - onsite -Irvine, CA
Duration: 6 months
GBaMS ReqID: 10958299
Job Title: AD Architect

Prescreening Question:
Section 1: Identity & Access Management (IAM) and Security
Q1. What are the core principles of CIAA in Identity and Access Management?
Q2. How would you secure an Active Directory environment against unauthorized access?

Section 2: Windows Server Security & Vulnerability Management
Q3. Describe your experience with Windows Server vulnerability remediation.
Q4. What steps would you take to achieve secure compliance on a Windows Server?

Section 3: Active Directory Domain Services
Q5. Explain the process of upgrading Domain Controllers from Windows Server 2019 or 2022 to newer versions.

ROLE_DESCRIPTION
"1. IAM (identity and Access Management) and security experience/CIAA (Confidentiality, Integrity, Authorization and Accountability)
2. Windows Server vulnerability remediation, patching, and secure compliance implementation.
3. Domain Controller and DC schema updates from 2019 or 2022 to 2025, replication and troubleshooting.
4. Managing Flexible Single Master Operations roles
5. Windows Event Auditing and forwarding audit events to centralized logging
6. DNS record management, adding reverse zones and PTR records. Also managing SOA, NS A, CNAME, MX, TXT, SRV records
7. GPO group policy management experience.
8. Managing PKI/Certificates, ssl cipher suites associated with AD, and LDAPS configuration
9. TCP/IP, basic networking TCP/UDP and experience on the ports operating inside Microsoft Active Directory.
10. Cloud Experience, AWS, Azure, GCP, virtual machines and troubleshooting VM 's inside a cloud environment."

SKILLS_REQUIRED
AD Architect, DNS, AWS Networking

Experience needed - 10 - 12 Years

Role Descriptions: Strategic Planning Creating security blueprints and roadmaps for cloud adoption that align with business goals.Security Design Implementation Designing secure| scalable| and compliant cloud architectures.Policy Definition Establishing security policies| standards| and guidelines for public| private| and hybrid clouds.Risk Management Compliance Assessing cloud environments for vulnerabilities| managing risk| and ensuring compliance with regulations.Technical Controls Configuring network security| identity and access management (IAM)| and encryption strategies.Collaboration Guidance Working with IT and development teams to embed security into applications (DevSecOps)
Essential Skills: Strategic Planning Creating security blueprints and roadmaps for cloud adoption that align with business goals.Security Design Implementation Designing secure| scalable| and compliant cloud architectures.Policy Definition Establishing security policies| standards| and guidelines for public| private| and hybrid clouds.Risk Management Compliance Assessing cloud environments for vulnerabilities| managing risk| and ensuring compliance with regulations.Technical Controls Configuring network security| identity and access management (IAM)| and encryption strategies.Collaboration Guidance Working with IT and development teams to embed security into applications (DevSecOps)
Desirable Skills:
Keyword:
Skills: Digital : Cloud Security Management
Experience Required: 8-10 Comments for Suppliers: Prescreening Question:
Section 1: Identity & Access Management (IAM) and Security
Q1. What are the core principles of CIAA in Identity and Access Management?
Q2. How would you secure an Active Directory environment against unauthorized access?

Section 2: Windows Server Security & Vulnerability Management
Q3. Describe your experience with Windows Server vulnerability remediation.
Q4. What steps would you take to achieve secure compliance on a Windows Server?

Section 3: Active Directory Domain Services
Q5. Explain the process of upgrading Domain Controllers from Windows Server 2019 or 2022 to newer versions.