Microsoft Technical Solutions Architect (IT SE III) (Government)

AT&T Global Public Sector is a trusted provider of secure, IP enabled, cloud-based, network solutions and professional services to the Federal Government. We are dedicated to recruiting, developing and empowering a diverse, high-performing workforce that is passionate about what they do, committed to our shared values and dedicated to our customers’ mission. Our National Security Team supports the intelligence community, providing, operating, and assuring critical voice, video and collaboration services for the full spectrum of operations. We are seeking a Microsoft Solutions Architect  to lead the design, modernization, security, and automation of enterprise on-prem Microsoft infrastructure. This role serves as the technical authority for Windows Server and Active Directory architecture, driving strategic technology decisions, engineering standards, and long-term infrastructure roadmaps.   The ideal candidate combines deep technical expertise with strong leadership skills and thrives in complex, highly secure enterprise environments. This is a full-time onsite role based in the location(s) posted and is performed from the designated work location five days per week. No relocation is offered. Work to be performed at a government customer site in Chantilly, VA. Description of Job Duties/Responsibilities: Architecture & Strategy: Define and maintain enterprise architecture standards for Microsoft technologies. Develop technology roadmaps, modernization strategies, and future-state designs. Lead architecture reviews, technical evaluations, and solution design efforts. Serve as the primary Microsoft infrastructure SME for technical planning and stakeholder engagements.   Infrastructure Engineering: Design, implement, and support highly available Microsoft on-prem solutions, including: Active Directory Domain Services (AD DS) Windows Server DNS, DHCP, Group Policy, and Kerberos PKI/AD CS File, storage, and remote desktop services Design delegated administration, RBAC, and identity management solutions. Create detailed architectural documentation, implementation plans, and operational standards.   Automation & Security: Develop automation solutions using PowerShell and modern infrastructure automation tools. Implement security best practices, privileged access controls, and DISA STIG compliance. Lead vulnerability remediation, system hardening, and infrastructure security initiatives.   Technical Leadership: Troubleshoot and resolve complex infrastructure and performance issues. Perform root cause analysis and drive continuous improvement. Lead technical projects through the full system lifecycle and mentor engineering teams. Collaborate with security, network, application, and operations teams to deliver enterprise solutions.   Required Clearance: TS/SCI with polygraph. (#ts/sci) (#polygraph) Required Qualifications: Experience: ·        Candidate must have 16 years of experience that can be a combination of work history and education. This equates to a Doctorate and 8 years, master’s and 10 years, bachelor’s and 12 years, associates and 14 years or HS diploma and 16 years. Bachelor's degree in Computer Science, Information Technology, Engineering, or related field (or equivalent experience). 7+ years designing and supporting enterprise Windows Server environments.   Technical Expertise: Deep expertise in: Windows Server Active Directory Group Policy DNS and DHCP PKI/AD CS Enterprise identity and access management High-availability and clustering technologies Experience with Active Directory architecture, delegated administration, and RBAC design. Advanced PowerShell scripting and infrastructure automation experience. Experience with enterprise patch management, configuration management, and deployment automation. Strong understanding of Microsoft security best practices, DISA STIGs, least-privilege access, and vulnerability remediation. Experience with VMware, Hyper-V, or comparable virtualization