Technical Solutions Architect – Microsoft Infrastructure (Current TS/SCI Clearance with a CI Polygraph Required)

Location: Springfield, VA

Job Type: Full-Time

Clearance Required: TS/SCI with CI Polygraph

Position Category: Software / Infrastructure Engineering

Job Overview

We are seeking a Microsoft Technical Solutions Architect to lead the design, modernization, security, and automation of enterprise on-premises Microsoft infrastructure. In this role, you will serve as the technical authority for Windows Server and Active Directory architecture, driving strategic technology decisions, engineering standards, and long-term infrastructure roadmaps.

The ideal candidate combines deep technical expertise with strong leadership skills and excels in complex, highly secure enterprise environments.

Key Responsibilities

Architecture & Strategy

• Define and maintain enterprise architecture standards for Microsoft technologies.
  

• Develop technology roadmaps, modernization strategies, and future-state designs.
  

• Lead architecture reviews, technical evaluations, and solution design efforts.
  

• Serve as the primary Microsoft infrastructure Subject Matter Expert (SME) for technical planning and stakeholder engagements.
  

Infrastructure Engineering

• Design, implement, and support highly available enterprise Microsoft on-premises solutions, including:
  

  • Active Directory Domain Services (AD DS)
    

  • Windows Server
    

  • DNS, DHCP, Group Policy, and Kerberos
    

  • PKI / AD CS
    

  • File, storage, and remote desktop services
    

• Design delegated administration, Role-Based Access Control (RBAC), and identity management solutions.
  

• Create detailed architectural documentation, implementation plans, and operational standards.
  

Automation & Security

• Develop automation solutions using PowerShell and modern infrastructure automation tools.
  

• Implement security best practices, privileged access controls, and DISA STIG compliance.
  

• Lead vulnerability remediation, system hardening, and infrastructure security initiatives.
  

Technical Leadership

• Troubleshoot and resolve complex infrastructure and performance issues.
  

• Perform root cause analysis and drive continuous improvement.
  

• Lead technical projects through the full system lifecycle and mentor engineering teams.
  

• Collaborate with security, network, application, and operations teams to deliver enterprise-level solutions.
  

Qualifications & Skill Requirements

Education & Experience Requirements

Candidates must have 16 years of combined professional experience and higher education, meeting one of the following criteria:

• Doctorate + 8 years of relevant experience
  

• Master’s Degree + 10 years of relevant experience
  

• Bachelor’s Degree (Computer Science, IT, Engineering, or related field) + 12 years of relevant experience
  

• Associate’s Degree + 14 years of relevant experience
  

• High School Diploma / GED + 16 years of relevant experience
  

Essential Technical Qualifications

• Experience: 7+ years designing and supporting enterprise Windows Server environments.
  

• Core Expertise: Windows Server, Active Directory, Group Policy, DNS, DHCP, PKI/AD CS, enterprise Identity and Access Management (IAM), high-availability, and clustering technologies.
  

• Identity & Access: Hands-on experience with Active Directory architecture, delegated administration, and RBAC design.
  

• Automation: Advanced PowerShell scripting and infrastructure automation experience.
  

• Configuration & Patching: Experience with enterprise patch management, configuration management, and deployment automation.
  

• Security & Compliance:
  

  • Compliance with DoD 8140 Information Assurance Technical (IAT) Level II.
    

  • Strong understanding of Microsoft security best practices, DISA STIGs, least-privilege access, and vulnerability remediation.
    

• Virtualization & Networking:
  

  • Experience with VMware, Hyper-V, or comparable virtualization platforms.
    

  • Strong knowledge of networking fundamentals (TCP/IP, DNS, VLANs, firewalls, network segmentation).
    

  • Proven ability to troubleshoot complex Windows, networking, virtualization, and storage environments.
    

Professional Skills

• Strong analytical and problem-solving abilities.
  

• Excellent communication and technical documentation skills.
  

• Demonstrated ability to lead complex technical initiatives and work independently in a fast-paced environment.
  

Desired / Preferred Skills

• Experience with multi-site and geographically distributed Active Directory environments.
  

• Experience with domain consolidations, migrations, and infrastructure modernization initiatives.
  

• Experience with Ansible, Terraform, or similar infrastructure-as-code platforms.
  

• Experience with Virtual Desktop Infrastructure (VDI), FSLogix, Dynamic Environment Manager (DEM), and enterprise desktop engineering.
  

• Experience integrating Windows and Red Hat Enterprise Linux (RHEL) environments.
  

• Experience with enterprise backup, disaster recovery (DR), and business continuity solutions.
  

• Knowledge of Zero Trust architecture and cybersecurity frameworks.
  

• Experience leading architecture reviews, proof-of-concept (PoC) efforts, and large-scale infrastructure transformation programs.
  

• Experience working in highly regulated enterprise or government environments.
  

Compensation & Benefits

• Salary Range: $132,000 – $149,000 (commensurate with experience, skills, education, and specific role responsibilities).
  

• Comprehensive Benefits Package: Medical, dental, and vision coverage, short-term/long-term disability, basic life insurance, 401(k) with company match, paid time off (PTO), paid holidays, paid parental leave, and tuition reimbursement.