Active Directory (AD) Architect

Active Directory (AD) Architect

Job details

General information

Entity

Safran is an international high-technology group operating in the fields of aerospace (propulsion, equipment and interiors), space and defense. Its mission is to contribute sustainably to a safer world, where air transport becomes ever more environmentally friendly, comfortable and accessible. Present on every continent, the Group employs 110,000 people and generated €31.3 billion in revenue in 2025. Safran holds, either independently or through partnerships, leading global or European positions in its markets.

Safran was ranked second in the Aerospace & Defense sector in TIME magazine's ""World's Best Companies 2025"" ranking.

As the world leader in aeronautical electrical systems, Safran Electrical & Power is a key player in the electrification of aircraft equipment and electric and hybrid propulsion. With expertise across the onboard energy chain, the company designs and delivers innovative, optimized and modular architectures and solutions.

Reference number

Job details

Domain

Performance and Support

Job field / Job profile

IT - Operations technician

Job title

Active Directory (AD) Architect

Employment type

Permanent

Professional category

Employees / Staff

Part time / Full time

Full-time

Job description

HERE, WE CRAFT EXCELLENCE TOGETHER. At Safran, we believe in sustainable career journeys, collaboration as a cornerstone of innovation, and the freedom to explore diverse career paths. We are proud to be featured in TIME's World's Best Companies 2025 ranking, securing 2nd place in the Aerospace & Defense sector and 52nd overall. As an Active Directory Architect, you'll contribute to meaningful projects that shape the future of aerospace.

This position contributes to our vision by:

Design and maintain enterprise Active Directory architecture, including forests, domains, trusts, organizational units, and sites.

Develop identity management roadmaps aligned with business and cybersecurity objectives and compliance to NIST and CMMC standards.

Architect and manage solutions Active Directory.

Lead Active Directory security assessments and remediation efforts.

Ensure high availability, disaster recovery, and business continuity for directory services.

Serve as the subject matter expert for identity services.

Designs, implements, and maintains Active Directory Domain Services (AD DS) across multi-site environments;

Manages Group Policy Objects (GPOs), Organizational Units (OUs), and user/computer accounts;

Monitors and optimizes Active Directory replication, performance, and health;

Implements and manages Active Directory Federation Services (AD FS) and Azure AD integration;

Configures and troubleshoots DNS and DHCP services related to AD;

Ensures security best practices for AD infrastructure, including role-based access control, auditing, and hardening;

Develops and maintains PowerShell scripts for automation of routine AD tasks;

Collaborates with the security and compliance teams on identity governance and access control;

Supports hybrid identity infrastructure (on-prem and cloud);

Participates in disaster recovery planning and backup strategies for directory services;

Performs domain migrations, trust configurations, and forest design as needed;

Adheres to safe work practices and contributes to the evolution of the health, safety, and environmental program and culture;

Regular, predictable attendance is required;

Other duties may be assigned.

Develops and maintains PowerShell scripts for automation of routine AD tasks;

Participates in disaster recovery planning and backup strategies for directory services;

Performs domain migrations, trust configurations, and forest design as needed;

Designs, implements, and maintains Active Directory Domain Services (AD DS) across multi-site environments;

Manages Group Policy Objects (GPOs), Organizational Units (OUs), and user/computer accounts;

Monitors and optimizes Active Directory replication, performance, and health;

What we offer:

• Competitive salaries
• Paid holidays
• Recognition programs
• Comprehensive benefits
• Retirement (401K) plans with employer match
• Professional development opportunities
• Tuition assistance

But what else? (advantages, specificities, etc.)

At Safran Electrical & Power, we value service-oriented team players who demonstrate strong interpersonal skills, a positive attitude, and the ability to adapt to our dynamic, innovative environment.

Education and/or Experience

Bachelor's degree in IT, Computer Science, Engineering, or related field.

8+ years supporting Microsoft Active Directory environments.

5+ years designing enterprise-scale Active Directory architectures.

Experience with Microsoft Entra ID, ADFS, DNS, PKI, and Group Policy.

Strong PowerShell automation skills.

Knowledge/Skills

In-depth knowledge of Active Directory, DNS, DHCP, GPOs, AD FS, Azure AD, and LDAP - Expert

Experience with PowerShell scripting and automation tools - Advanced

Understanding of identity federation, SSO, and conditional access policies - Expert

Familiarity with Microsoft security baselines and compliance frameworks - Basic

Experience with tools like ADManager Plus, Quest - Expert

Exposure to Zero Trust, Privileged Access Management (PAM), or Identity Governance and Administration (IGA) - Advanced

Experience with cloud identity platforms like Okta, Ping Identity, or SailPoint is a plus - Advanced

Exposure or knowledge of Cybersecurity Maturity Model Certification (CMMC), NISTSP800-171, NISTSP800 172 a plus - Advanced

Strong analytical and troubleshooting skills – Advanced

Experience with Microsoft Entra ID, ADFS, DNS, PKI, and Group Policy - Expert

Candidate skills & requirements

Strong PowerShell automation skills - Advanced

Certificates, Licenses, Registrations

Microsoft Certifications such as MCSA/MCSE, Microsoft Certified: Identity and Access Administrator Associate, or Azure Solutions Architect is a plus

Core Competencies

Enterprise Architecture

Identity & Access Management

Security Architecture

Technical Leadership

Risk Management

Project Management

• This position sits and performs computer work for extended periods of time. The position may require up to 5% travel. This position may be eligible for hybrid remote work.

Across all team members, we are looking for the following attributes:

• Innovative & Curious
• Collaborative & Inclusive
• Committed to Safety
• Trustworthy
• Results Focused
• Driven to Excellence
• Powered by Teamwork

Highlights from our facility:

As the North American headquarters for Safran Electrical & Power, the Denton, Texas facility brings together a diverse team committed to crafting excellence. Here, we innovate smarter electrical solutions for a better flight—together. Recognized with honors such as the Northrop Grumman Supplier Performance Excellence Award, Sikorsky Elite Supplier, and Boeing Supplier of the Year, we are proud to lead in quality and innovation. Located in the heart of North Texas, Denton offers a vibrant arts and music scene and is home to two major universities!

Discover Safran through our videos:

This description outlines the general nature and level of work for this position. Duties, responsibilities, and qualifications may vary by assignment or group. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.

Safran Electrical & Power is committed to working with and providing reasonable accommodation to individuals with physical and mental disabilities. For verification or accommodation requests, please email or call . We will make a determination on your request for reasonable accommodation on a case-by-case basis.

Candidates for positions with Safran Electrical & Power must be legally authorized to work in the United States. Employment eligibility verification will be required at the time of hire.

This position requires access to technologies and hardware subject to US national security based export control requirements. All applicants must be US Citizens, or otherwise authorized by the U.S. Government. No company sponsorship will be offered.

Relocation assistance is not offered for this position.

Annual salary

Based on Experience

Job location

Job location

North America, United States, Texas

City (-ies)

Denton

Applicant criteria

Minimum education level achieved

Bachelor's Degree

Minimum experience level required

More than 5 years

ITAR Controlled Position: Select "Yes" if role requires U.S. citizenship/permanent residency

Yes