{"id":3777643,"url":"https://alion.io/job/concentrix-cloud-solution-architect-v-csa-active-directory-pki-hybrid-identity","title":"Cloud Solution Architect (v-CSA) – Active Directory, PKI & Hybrid Identity","company":{"id":84,"name":"Concentrix","domain":"concentrix.com","url":"https://alion.io/company/concentrix","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"C","score":66,"open_postings":1022,"ghost_share":0.565,"stale_share":0,"repost_share":0.016,"time_to_fill_p50_days":26,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Solutions","role_family":"Solutions","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Sweden"],"countries":["SE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"DNS","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false}],"status":"live","first_seen_at":"2026-11-03T00:00:00Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-12T11:27:20Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":9},"description":"Job Title:\nCloud Solution Architect (v-CSA) - Active Directory, PKI & Hybrid IdentityJob Description\nWe're Concentrix. The intelligent transformation partner. Solution-focused. Tech-powered. Intelligence-fueled.The global technology and services leader that powers the world’s best brands, today and into the future. We’re solution-focused, tech-powered, intelligence-fueled. With unique data and insights, deep industry expertise, and advanced technology solutions, we’re the intelligent transformation partner that powers a world that works, helping companies become refreshingly simple to work, interact, and transact with. We shape new game-changing careers in over 70 countries, attracting the best talent.\nThe Concentrix Technical Products and Services team is the driving force behind Concentrix’s transformation, data, and technology services. We integrate world-class digital engineering, creativity, and a deep understanding of human behavior to find and unlock value through tech-powered and intelligence-fueled experiences. We combine human-centered design, powerful data, and strong tech to accelerate transformation at scale. You will be surrounded by the best in the world providing market leading technology and insights to modernize and simplify the customer experience. Within our professional services team, you will deliver strategic consulting, design, advisory services, market research, and contact center analytics that deliver insights to improve outcomes and value for our clients. Hence achieving our vision.\nOur game-changers around the world have devoted their careers to ensuring every relationship is exceptional. And we’re proud to be recognized with awards such as \"World's Best Workplaces,\" “Best Companies for Career Growth,” and “Best Company Culture,” year after year.\nJoin us and be part of this journey towards greater opportunities and brighter futures.\nWe are looking for a Cloud Solution Architect with deep expertise in Public Key Infrastructure (PKI) / Active Directory Certificate Services (AD CS), Active Directory Federation Services (ADFS) and Active Directory to support enterprise and regulated customers in Sweden and the Nordics.\nThis is a customer-facing role responsible for delivering secure identity and certificate architecture, acting as a trusted technical advisor, and executing repeatable AD CS, ADFS and Windows security engagements across on-premises and hybrid environments. This position is a backfill: depth in PKI / AD CS and ADFS is the primary requirement, with Windows Server/Client security and hybrid identity (Microsoft Entra) as essential complementary skills.\nKey Responsibilities:\n1. PKI, Certificate Services & Identity Architecture\nDesign, assess and implement enterprise PKI and Active Directory Certificate Services (AD CS) solutions, including CA hierarchy, templates, enrollment, revocation and certificate lifecycle management.\nDesign and support Active Directory Domain Services (AD DS) and ADFS architectures, including federation, claims, relying-party trusts and modernization/migration to Microsoft Entra ID.\nGuide customers on certificate-based trust models, authentication, authorization and secure identity architecture.\n2. Customer Delivery & Execution\nLead end-to-end delivery of Unified/EDE engagements, including Active Directory Certificate Services Assessment, Onboarding Accelerator - Deployment and Migration Assistance for AD CS (Base and Add-On), Technical Blocker Mitigation - AD CS, Show Technical Ability - AD CS and ADFS Assessment.\nTroubleshoot complex certificate, authentication (Kerberos/NTLM), federation, DNS, Group Policy and DFS issues.\nDeliver high-quality, repeatable technical engagements with clear findings, remediation plans and reports.\n3. Trusted Advisor & Stakeholder Management\nAct as a trusted technical advisor for customers, CSAMs, SDMs and internal stakeholders.\nTranslate business, compliance and security requirements into practical technical architecture.\nCommunicate clearly with technical teams and customer decision makers, in English and Swedish.\n4. Security Hardening & Governance\nGuide customers on secure-by-design identity and certificate architectures.\nDrive security hardening for Windows Server, Windows Client, Active Directory, AD CS and ADFS.\nSupport data security architecture discussions (e.g., Architecture Service - Data Security) where they relate to identity and certificate trust.\n5. Operations, Resilience & Optimization\nImprove operational stability, monitoring and reliability of identity, federation and certificate services.\nSupport backup, disaster recovery and business continuity for AD, AD CS and ADFS.\n6. Collaboration & Knowledge Sharing\nCollaborate with CSAMs, partners, engineering teams and CSA communities to deliver customer outcomes.\nContribute to reusable assets, delivery IP and best practices for PKI, ADFS and hybrid identity.\nShare knowledge within the Nordic pod to keep identity and certificate depth in the team after transition.\nRequired Technical Skills:\nTarget Skill Set (required)\nThe role covers the following CSA GD taxonomy skills. Only the Tier 1 skills are mandatory at expert level; Tier 2 skills are required at a solid working level and can be deepened on the job. For every technology, the candidate is expected to cover backup and recovery as well as design, operations and troubleshooting.\nTier 1 - Mandatory (expert-level, deep hands-on delivery)\n· Public Key Infrastructure (PKI) and Certificate Services - AD CS CA hierarchy, templates, enrollment, revocation and certificate lifecycle; CA database and private-key backup, CA recovery/restore and CRL/AIA continuity.\n· Active Directory Federation Services (ADFS) - federation design, relying-party trusts, claims, SSO and migration to Microsoft Entra ID; ADFS configuration and token-signing certificate backup, farm recovery and high availability.\n· Active Directory - AD DS design, operations, troubleshooting, Group Policy, DNS and modernization; system-state backup, authoritative/non-authoritative restore and AD forest recovery.\nTier 2 - Required working knowledge\n· Windows Server Security - Windows Server hardening, Kerberos/NTLM, tiering and privileged access; secure backup and recovery of Tier 0 servers.\n· Windows Client Security - Windows client hardening, security baselines and credential protection; recovery of BitLocker keys and client security configuration.\n· Distributed File System (DFS) - DFS Namespaces and DFS Replication design, health and troubleshooting; DFS-N configuration backup and DFS-R database/content recovery.\n· Microsoft Entra Enterprise Apps & SSO - enterprise application integration, SAML/OIDC SSO and app migration from ADFS to Entra ID; backup and restore of app/SSO configuration and signing-certificate rollover.\n· Networking - networking fundamentals for identity services (DNS, name resolution, ports/firewalling, load balancing, proxies); DNS zone backup and recovery.\nCore Must-have Skills:\nstrong on-premises experience is a must\nMandatory: expert-level depth in at least 2 of the 3 Tier 1 skills:\nExpert-level Public Key Infrastructure (PKI) / Active Directory Certificate Services (AD CS), including design, migration, certificate lifecycle, templates, enrollment, governance and troubleshooting, including backup and recovery.\nExpert-level Active Directory Federation Services (ADFS), including federation design, SSO/enterprise application integration, troubleshooting and migration to Microsoft Entra ID, including backup and recovery.\nStrong Active Directory Domain Services and Windows Server Security knowledge, including DNS, Group Policy, Kerberos/NTLM and security hardening, including backup and recovery.\nAnd:\nStrong Windows Client Security knowledge.\nAbility to operate confidently across on-premises and hybrid identity environments.\nProven experience planning and executing backup, restore and disaster recovery for AD, AD CS and ADFS.\nAdditional Skills - Strongly Preferred\nMicrosoft Entra External ID (B2B) scenarios.\nPowerShell scripting and automation for AD, AD CS and ADFS operations and reporting.\nBetter to Have\nMicrosoft Defender for Identity, Microsoft Sentinel, Entra ID Protection / Conditional Access, privileged access and identity governance.\nMicrosoft Entra Connect / Cloud Sync and hybrid identity fundamentals.\nDelivery Accreditations\nActive accreditation (or readiness to accredit within the first [XXX] months) in: Active Directory Certificate Services Assessment; Onboarding Accelerator - Deployment and Migration Assistance for AD CS (Base / Add-On); Technical Blocker Mitigation - AD CS; Show Technical Ability - AD CS; Active Directory Federation Services Assessment.\nArchitecture Service - Data Security is a plus.\nSecurity & High-Security Environment Requirements\nProven experience in environments with high security, compliance, confidentiality or regulated customer requirements (public sector, critical infrastructure, defense, financial services).\nAbility to follow strict confidentiality expectations and demonstrate professionalism, integrity, reliability and accountability.\nWhere customer engagements require it, the candidate must be able to meet applicable security screening, background check or clearance requirements.\nFluent English, spoken and written, is mandatory.\nFluent Swedish or Finnish is strongly recommended. Additional Nordic languages are a plus.\nBased in Sweden; ability to work onsite as required for customer delivery, workshops or high-security engagements.\nFlexibility to travel within the Nordics as needed.\nCore Qualifications & Capabilities\nL4 - Senior CE or above in customer-facing technical delivery or advisory roles with enterprise customers.\nStrong troubleshooting and problem-solving skills in critical identity, authentication, federation and certificate situations.\nExcellent communication, presentation and stakeholder engagement skills.\nStrong balance between deep technical expertise and business understanding.\nStrong ownership mindset, delivery discipline and ability to contribute to team knowledge and repeatable IP.\nWhat Makes This Role Unique:\nDeep specialist role focused on PKI / AD CS and ADFS, among the highest-demand on-premises identity offerings in Nordic EDE delivery.\nCombines assessment, design, migration, hands-on delivery and customer advisory in high-security Nordic environments.\nOpportunity to expand into adjacent areas such as Entra ID modernization, Defender for Identity and Sentinel.\nLocation:\nSWE Work-at-HomeLanguage Requirements:\nTime Type:","description_format":"text","description_chars":10553,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Swedish","level":"Advanced (C1)","optional":false},{"language":"Finnish","level":"Advanced (C1)","optional":false},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Sweden","iso":"SE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Business Process Outsourcing (BPO)","Call Center Services"],"lifecycle":[{"event":"open","at":"2026-11-04T23:45:20Z"}],"visa":[],"liveness":{"score":57,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":0.9,"age_days":9,"expected_fill_days":26,"reasons":["conf:11","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-11-12T10:38:37Z"},"pay":null,"html_url":"https://alion.io/job/concentrix-cloud-solution-architect-v-csa-active-directory-pki-hybrid-identity","json_url":"https://alion.io/job/concentrix-cloud-solution-architect-v-csa-active-directory-pki-hybrid-identity.json","meta":{"generated_at":"2026-11-12T11:38:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23959,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":84},"rest":"https://alion.io/mcp/rest/get_company?id=84"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fconcentrix-cloud-solution-architect-v-csa-active-directory-pki-hybrid-identity"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fconcentrix-cloud-solution-architect-v-csa-active-directory-pki-hybrid-identity"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fconcentrix-cloud-solution-architect-v-csa-active-directory-pki-hybrid-identity"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/concentrix-cloud-solution-architect-v-csa-active-directory-pki-hybrid-identity\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fconcentrix-cloud-solution-architect-v-csa-active-directory-pki-hybrid-identity"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3777643}},{"tool":"search_jobs","arguments":{"company":"concentrix.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3777643},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}