{"id":2231197,"url":"https://alion.io/job/sonata-software-principal-solution-architect-adfs-core-pki-active-directory","title":"Principal Solution Architect ADFS Core, PKI & Active Directory","company":{"id":5150,"name":"Sonata Software","domain":"sonata-software.com","url":"https://alion.io/company/sonata-software","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Solutions","role_family":"Solutions","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":21000,"max_usd":47000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":9},"experience_years_min":15,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"DNS","optional":false},{"name":"Edge AI","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"PKI","optional":false},{"name":"Snowflake","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"Azure","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"PowerShell","optional":true},{"name":"Windows Server","optional":true}],"status":"live","first_seen_at":"2026-10-10T18:02:08Z","employer_posted_date":null,"last_verified_at":"2026-10-10T18:02:08Z","board_verified":false,"closed_at":null,"days_open":10,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":10},"description":"About Sonata Software\n\nSonata Software, with over $1.2 Billion Revenue, is a leading AI-first Modernization Engineering company, powered by our unique PlatformationTM framework. Our 6400+ AI Engineers are helping enterprises transform from systems to intelligent business platforms leveraging partner ecosystem to drive speed, efficiency and growth. Our bouquet of Modernization Engineering Services with AI -first approach cuts across Cloud, Data, AI, Dynamics, Test Automation, and Managed Services.\n\nSonata's AI-led modernization is enabled by a powerful suite of proprietary tools and assets. At the core is the  Harmoni.AI  Enterprise Platform, which includes  AgentBridge -a governance and observability framework;  Agent Builder -a development toolkit for fungible agents integrated into enterprise systems; and the  Agent Marketplace -an internal ecosystem for modular, reusable agents.\n\nHeadquartered in Bengaluru, India, Sonata Software has a strong global presence, including key regions US, UK, India, Malaysia, Mexico, Australia, DACH (Germany/Switzerland) & Nordics (Finland). We are a trusted partner of Fortune 500 companies in Banking, Financial Services and Insurance; Healthcare and Lifesciences; Telecom, Media, and Technology; and Retail, Manufacturing and Distribution space.\n\nDeep collaborations with partners like Microsoft, AWS, Salesforce, and Snowflake strengthen our ability to deliver cutting-edge AI solutions. Our 30+years of partnership with Microsoft, and being part of the elite Microsoft Inner Circle, places us among the top 1% of global Microsoft partners. Sonata is now among the first companies to earn the  Microsoft Frontier Partner Badge  Also; Sonata Software is proud to achieve AWS Premier Tier Status in the AWS Partner Network.\n\nPrincipal Solution Architect – ADFS Core, PKI & Active Directory \n\n Role Overview : We are looking for a highly experienced Principal Solution Architect with 15+ years of expertise in Microsoft Active Directory, Active Directory Federation Services (ADFS), Public Key Infrastructure (PKI), and Microsoft Identity technologies to join the CSA Global Delivery (CSA GD) team. The successful candidate will serve as a technical authority and architecture leader for complex enterprise identity, authentication, federation, directory services, and PKI engagements. The role requires deep hands-on technical expertise combined with the ability to define enterprise architectures, lead complex implementations and transformations, troubleshoot critical environments, and provide technical direction to engineering teams and customers. The architect will work closely with Microsoft customers, CSA teams, engineering teams, program managers, and other technology stakeholders to design secure, scalable, resilient, and modern identity solutions.\n\nKey Responsibilities\n\n Solution Architecture & Design \n Lead architecture and design of complex Microsoft Identity and Access Management solutions.\n Develop enterprise architectures covering: o Active Directory Domain Services (AD DS)\nActive Directory Federation Services (ADFS)\nPKI / Active Directory Certificate Services (AD CS)\nActive Directory Domain Controllers\nDNS and Group Policy\nWindows authentication and authorization o Kerberos and NTLM\nLDAP\nFederation and SSO\nHybrid identity\n Define High-Level Design (HLD), Low-Level Design (LLD), architecture diagrams, technical standards, and implementation strategies.\n Design highly available and resilient identity infrastructures across on-premises, hybrid, and cloud environments.\n Conduct architecture assessments and identify technical, security, scalability, and operational risks.\n Provide modernization strategies for legacy AD/ADFS/PKI environments.\n Active Directory – Principal-Level Expertise \n Provide deep architectural expertise in Active Directory Domain Services (AD DS).\n Design and optimize:\nForest and domain architecture\nDomain/forest trusts\nSites and Services\nReplication topology\nGlobal Catalog\nFSMO role\nDNS integration\nGroup Policy architecture\nOU and delegation models\nAuthentication architecture\n Troubleshoot complex AD issues involving:\nReplication failures\nKerberos authentication\nDNS\nSYSVOL/DFSR\nDomain controller health\nTrust relationships o Authentication failures\nGPO processing\n Lead AD forest/domain migrations, consolidations, restructures, and modernization initiatives.\n Develop AD recovery and business continuity strategies, including forest recovery.\n ADFS Core\n Provide subject-matter expertise in Active Directory Federation Services (ADFS) architecture and implementation.\n Design and troubleshoot complex:\nADFS farms o Federation services\nWeb Application Proxy (WAP)\nClaims-based authentication\nClaims rules\nRelying Party Trusts\nClaims Provider Trusts\nSAML\nWS-Federation\nOAuth/OIDC integrations where applicable\n Design highly available and secure ADFS architectures.\n Troubleshoot complex authentication and federation issues.\n Analyze ADFS event logs, authentication flows, token issuance, certificates, and claims.\n Lead ADFS migrations, upgrades, farm redesigns, and modernization programs.\n Develop strategies for transitioning legacy ADFS workloads to modern cloud-based identity platforms where appropriate.\n PKI / Active Directory Certificate Services \n Provide principal-level architecture expertise in Microsoft PKI and Active Directory Certificate Services (AD CS).\n Design enterprise PKI architectures including:\nRoot CA\nSubordinate/Issuing CA\nOffline Root CA\nEnterprise CA\nStandalone CA\nCertificate templates\nCRL\nOCSP\nAIA/CDP\n Design certificate lifecycle management strategies.\n Troubleshoot complex certificate issuance, validation, revocation, and trust-chain issues.\n Architect PKI solutions for:\nWindows authentication\nSmart cards\nDevice authentication\nTLS/SSL\nWi-Fi authentication\nVPN\nApplication authentication\nCode signing\n Lead PKI migrations, CA upgrades, certificate authority consolidation, and certificate infrastructure modernization.\n Define PKI security controls, key protection, CA hierarchy, backup/recovery, and disaster recovery strategies.\n Identity Security\n Design secure identity architectures following Zero Trust and least-privilege principles.\n Assess risks associated with:\nPrivileged accounts\nDomain Admin access\nService accounts\nKerberos\nNTLM\nLDAP\nCertificate authorities\nADFS\nDomain Controllers\n Recommend security hardening for AD, ADFS, and PKI environments.\n Develop strategies for reducing legacy authentication protocols and improving identity security.\n Support identity security assessments and remediation programs.\n Modernization & Transformation \n Lead transformation initiatives from legacy identity infrastructure toward modern Microsoft identity architectures.\n Evaluate migration paths from:\nLegacy AD → Modern AD architecture\nADFS → Microsoft Entra ID\nLegacy PKI → Modern certificate management\nTraditional authentication → modern authentication\n Develop phased migration roadmaps while maintaining business continuity.\n Assess dependencies between legacy applications and identity infrastructure.\n Provide technical recommendations for hybrid identity and cloud adoption.\n Customer & Technical Leadership \n Act as a Principal Technical Advisor for complex customer engagements.\n Engage directly with customer architects, technical leaders, and senior stakeholders.\n Lead architecture workshops and technical deep dives.\n Translate complex technical requirements into scalable enterprise solutions.\n Present architecture recommendations and technical strategies to senior leadership.\n Serve as an escalation point for Severity 1 / critical identity incidents.\n Mentor senior engineers, architects, and technical leads.\n CSA GD / Global Delivery Responsibilities \n Collaborate with Microsoft CSA teams and Global Delivery stakeholders on complex customer engagements.\n Participate in customer workshops, architecture reviews, technical assessments, and delivery governance.\n Provide technical leadership across geographically distributed delivery teams.\n Define reusable architecture patterns, reference architectures, and technical accelerators.\n Contribute to knowledge management and technical communities within CSA GD.\n Identify opportunities for automation and standardization across identity engagements.\n\nRequired Technical Skills Mandatory\n\nActive Directory \n\n 15+ years of Microsoft infrastructure / identity experience.\n Expert-level Active Directory Domain Services knowledge.\n AD architecture and design.\n Forest/domain design.\n AD replication.\n DNS.\n Group Policy.\n Kerberos.\n LDAP.\n Trusts.\n Domain Controller architecture and troubleshooting.\n AD migration and consolidation.\n\n ADFS \n\n Deep expertise in ADFS.\n ADFS farm architecture.\n Claims-based authentication.\n Claims rules.\n Relying Party Trusts.\n SAML / WS-Federation.\n WAP.\n ADFS certificate management.\n Authentication troubleshooting.\n ADFS migration and modernization.\n\n PKI \n\n Expert-level Microsoft PKI / AD CS.\n Enterprise PKI architecture.\n Root and Subordinate CA.\n Certificate templates.\n CRL / OCSP.\n AIA / CDP.\n Certificate lifecycle management.\n PKI migration and recovery.\n PKI security and hardening.\n\nPreferred / Good-to-Have Skills\n\n Microsoft Entra ID\n Entra Connect / Azure AD Connect\n Hybrid Identity\n Microsoft Identity Manager (MIM)\n Microsoft Intune\n Conditional Access\n MFA\n Privileged Identity Management\n Microsoft Defender for Identity\n Windows Server\n PowerShell\n Microsoft Graph\n OAuth 2.0\n OpenID Connect\n SAML 2.0\n Zero Trust architecture\n Identity Governance\n PAM/PIM solutions\n Azure architecture\n Automation and scripting\n Infrastructure-as-Code concepts\n\n Architecture & Leadership Competencies \n\nThe Candidate Should Demonstrate The Ability To\n\n Own architecture for large-scale enterprise identity environments.\n Make architecture decisions involving security, availability, scalability, and operational complexity.\n Lead technical teams through complex transformation programs.\n Conduct architecture reviews and challenge existing technical designs.\n Provide clear technical recommendations to senior stakeholders.\n Lead customer-facing technical discussions independently.\n Mentor architects and senior engineers.\n Drive technical standards and reusable solutions.\n Manage ambiguity and provide structured technical direction.\n Operate effectively in a global delivery / customer-facing environment.\n\nEducation & Certifications Required\n\n Bachelor's degree in Computer Science, Information Technology, Engineering, or related discipline.\n\nPreferred Certifications\n\n Microsoft Certified: Identity and Access Administrator\n Microsoft Certified: Windows Server Hybrid Administrator\n Microsoft Certified: Azure Solutions Architect Expert\n Microsoft Certified: Cybersecurity Architect Expert\n Microsoft Certified: Azure Security Engineer Associate\n Microsoft Certified: Azure Administrator Associate\n\nEquivalent extensive enterprise architecture experience may be considered in lieu of specific certifications.\n\nExperience Profile The Ideal Candidate Should Have\n\n 15+ years of overall IT experience.\n Extensive experience designing and supporting enterprise Microsoft identity infrastructure.\n Significant experience working with large Active Directory environments.\n Proven expertise in ADFS and PKI architecture.\n Experience leading complex AD/ADFS/PKI migrations and modernization programs.\n Strong customer-facing and consulting experience.\n Experience working with globally distributed teams.\n Strong technical documentation and presentation skills.\n Experience acting as a technical authority / principal architect rather than solely as an implementation engineer.\n\nAt Sonata, you´ll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what´s possible. To build never seen before solutions to some of the world's toughest problems. You´ll be challenged, but you will not be alone. You´ll be joining a team of diverse innovators, all driven to go beyond the stat...","description_format":"text","description_chars":12375,"description_truncated":true,"requirements":{"experience_years_min":15,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams"],"lifecycle":[{"event":"open","at":"2026-10-10T20:09:30Z"}],"visa":[],"liveness":{"score":81,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.858,"p_room":0.945,"age_days":9,"expected_fill_days":26,"reasons":["seen:9","velocity","win:mid"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/sonata-software-principal-solution-architect-adfs-core-pki-active-directory","json_url":"https://alion.io/job/sonata-software-principal-solution-architect-adfs-core-pki-active-directory.json","meta":{"generated_at":"2026-10-21T02:01:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3092,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5150},"rest":"https://alion.io/mcp/rest/get_company?id=5150"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsonata-software-principal-solution-architect-adfs-core-pki-active-directory"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsonata-software-principal-solution-architect-adfs-core-pki-active-directory"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsonata-software-principal-solution-architect-adfs-core-pki-active-directory"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sonata-software-principal-solution-architect-adfs-core-pki-active-directory\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsonata-software-principal-solution-architect-adfs-core-pki-active-directory"}]}