{"id":590774,"url":"https://alion.io/job/concentrix-cloud-solution-architect-v-csa-active-directory-pki","title":"Cloud Solution Architect (v-CSA) - Active Directory & PKI","company":{"id":84,"name":"Concentrix","domain":"concentrix.com","url":"https://alion.io/company/concentrix","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"C","score":66,"open_postings":1000,"ghost_share":0.573,"stale_share":0,"repost_share":0.007,"time_to_fill_p50_days":26,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Solutions","role_family":"Solutions","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Finland"],"countries":["FI"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":36000,"max_usd":87000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1737},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"DNS","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false}],"status":"live","first_seen_at":"2026-09-10T10:55:10Z","employer_posted_date":"2026-09-10","last_verified_at":"2026-11-03T00:40:47Z","board_verified":true,"closed_at":null,"days_open":53,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":52},"description":"Job Title:\nCloud Solution Architect (v-CSA) - Active Directory & PKIJob Description\nWe are looking for a Cloud Solution Architect (CSA) with deep expertise in Active Directory (AD) and Public Key Infrastructure (PKI) to support enterprise and regulated customers in identity, security, and hybrid infrastructure scenarios.\nThis is a customer-facing role responsible for driving secure identity architecture, acting as a trusted technical advisor, and delivering resilient AD and PKI solutions across on-premises and hybrid environments. Depth in AD and PKI is the primary requirement; broader technical coverage is valuable when it supports identity, security, and regulated customer scenarios.\nKey Responsibilities\n1. Active Directory & PKI Architecture\nDesign and implement enterprise Active Directory Domain Services (AD DS) architectures.\nDesign and implement Public Key Infrastructure (PKI), Certificate Services, and certificate lifecycle management solutions.\nSupport AD domain design, consolidation, modernization, and operational governance.\nGuide customers on secure identity architecture, authentication, authorization, and certificate-based trust models.\n2. Customer Delivery & Execution\nLead end-to-end delivery of AD and PKI engagements, including assessment, design, implementation, migration, and troubleshooting.\nTroubleshoot complex identity, authentication, DNS, Group Policy, and certificate-related issues.\nDeliver high-quality, repeatable technical engagements for enterprise and regulated customers.\n3. Trusted Advisor & Stakeholder Management\nAct as a trusted technical advisor for customers and internal stakeholders.\nTranslate business, compliance, and security requirements into practical technical architecture.\nCommunicate clearly with technical teams, customer decision makers, CSAMs, partners, and engineering teams.\n4. Operations, Resilience & Optimization\nImprove operational stability, monitoring, and reliability of identity and certificate services.\nSupport disaster recovery, backup, and business continuity planning for AD and PKI services.\nDrive performance, maintainability, and operational maturity improvements.\n5. Security & Governance\nGuide customers on secure-by-design identity and certificate architectures.\nSupport security hardening for Active Directory, Windows Server, PKI, and related infrastructure.\nAdvise on access control, governance, compliance, and identity protection practices.\n6. Collaboration & Knowledge Sharing\nCollaborate closely with CSAMs, partners, engineering teams, and other CSA communities to deliver customer outcomes.\nContribute to reusable assets, delivery IP, technical guidance, and best practices for AD, PKI, and hybrid identity scenarios.\nShare knowledge with the broader team to strengthen depth in identity, security, and high-security customer delivery.\nRequired Technical Skills\nCore Must-have Skills: Onprem strong experience is must to have\nMinimum 2 of the following 3 skills:\nExpert-level Active Directory Domain Services (AD DS), including architecture, operations, troubleshooting, and modernization.\nExpert-level Public Key Infrastructure (PKI) / Active Directory Certificate Services (AD CS), including certificate lifecycle, templates, enrollment, governance, and troubleshooting.\nStrong Windows Server knowledge, including DNS, Group Policy, authentication protocols such as Kerberos and NTLM, and security hardening.\nAnd:\nKnowledge of recent Windows Server functionalities and enhancements required.\nStrong ability to operate confidently across on-premises and hybrid identity environments.\nAdditional Skills - Strongly Preferred\nMicrosoftSentinel experience is preferred, especially where it supports identity threat detection, security monitoring, and high-security customer scenarios.\nMicrosoft Defender for Identity or related identity threat detection experience.\nConditional Access, Identity Protection, privileged access, or identity governance experience.\nPowerShell scripting and automation for AD, PKI, operational reporting, and repeatable delivery.\nHybrid & Identity Integration -Better to have\nMicrosoft Entra ID and hybrid identity concepts.\nMicrosoft Entra Connect / AD Connect and synchronization fundamentals.\nIdentity federation such as ADFS and enterprise application / SSO integration.\nSecurity & High-Security Environment Requirements\nProven experience working in environments with high security, compliance, confidentiality, or regulated customer requirements.\nStrong awareness of classified, regulated, sovereign, public sector, defense, or critical infrastructure IT environments where applicable.\nAbility to follow strict confidentiality expectations and demonstrate professionalism, integrity, reliability, and accountability.\nAbility to work effectively in complex enterprise IT landscapes and fast-moving customer situations.\nWhere customer engagements require it, the candidate must be able to meet applicable security screening, background check, or clearance requirements.\nFinland citizenship and need to apply for security clearance\nLanguage & Location Requirements\nFluent English, spoken and written, is mandatory.\nFinnish is strongly preferred.\nRelevant Nordic language capability is considered a plus, depending on customer and country needs.\nAbility to work onsite as required for customer delivery, workshops, or high-security engagement needs.\nFlexibility to travel as needed.\nCore Qualifications & Capabilities\nExperience working with enterprise customers in customer-facing technical delivery or advisory roles.\nStrong troubleshooting and problem-solving skills, especially in critical identity, authentication, and certificate-related situations.\nExcellent communication, presentation, and stakeholder engagement skills.\nStrong balance between deep technical expertise and business understanding.\nAbility to adapt quickly in changing environments and manage multiple stakeholders under pressure.\nStrong ownership mindset, delivery discipline, and ability to contribute to team knowledge and repeatable IP.\nWhat Makes This Role Unique\nDeep specialist role focused on Active Directory and PKI rather than broad generalist coverage.\nCombines architecture design, hands-on delivery, customer advisory, and high-security environment readiness.\nProvides an opportunity to strengthen team capability in identity security while expanding into adjacent areas such as Microsoft Sentinel and identity threat protection.\nLocation:\nFIN -Work-at-HomeLanguage Requirements:\nTime Type:","description_format":"text","description_chars":6505,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Business Process Outsourcing (BPO)","Call Center Services"],"lifecycle":[{"event":"open","at":"2026-09-10T10:55:10Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.525,"p_room":0.28,"age_days":52,"expected_fill_days":26,"reasons":["conf:7","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/concentrix-cloud-solution-architect-v-csa-active-directory-pki","json_url":"https://alion.io/job/concentrix-cloud-solution-architect-v-csa-active-directory-pki.json","meta":{"generated_at":"2026-11-03T03:14:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4309,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":84},"rest":"https://alion.io/mcp/rest/get_company?id=84"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fconcentrix-cloud-solution-architect-v-csa-active-directory-pki"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fconcentrix-cloud-solution-architect-v-csa-active-directory-pki"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fconcentrix-cloud-solution-architect-v-csa-active-directory-pki"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/concentrix-cloud-solution-architect-v-csa-active-directory-pki\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fconcentrix-cloud-solution-architect-v-csa-active-directory-pki"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":590774}},{"tool":"search_jobs","arguments":{"company":"concentrix.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":590774},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}