Monster Jobs lê cada vaga aberta e diz, de 0 a 100, o match dela com o seu currículo — de graça. Você está vendo esta página sem a parte mais importante dela: a sua.

Pode ser 94. Pode ser 31.

O ponteiro só crava quando lemos o seu currículo. Leva 1 minuto, de graça.

DOSSIÊ MJ-7490 · ACESSO PARCIAL

Principal Security Architect, Active Directory & Entra ID Backup and Recovery

AvePoint · New York, New York, United States

HíbridoNão informadoStaff

Esta é 1 de 61.678 vagas encontradas nos últimos 30 dias. Nós comparamos todas com o seu currículo — hoje, esta página nem sabe quem você é.

Quero minha nota nesta vaga Abrir no Greenhouse

Grátis, sem cartão. Só o seu currículo.

Encontrada há 8 horas

Se candidatar no escuro custa uma noite.
Saber custa um minuto.

A conta que ninguém faz

Você, sozinho, numa noite

~20

vagas abertas e lidas uma a uma — a maioria descartada no terceiro parágrafo, quando o requisito que você não tem finalmente aparece. Dias assim, toda semana.

O Monster Jobs, enquanto isso

61.678

vagas já lidas e entendidas, prontas para ganhar nota contra o seu currículo no momento em que ele chegar. Você não procura mais vaga — recebe as que merecem a sua atenção.

Recrutador faz triagem de candidato.
Aqui, o recrutador é você — de vagas.

Cada uma chega com nota e motivo. Seu único trabalho é dizer sim ou não.

Assumir o cargo — é grátis

RELATÓRIO DE COMPATIBILIDADE · GERADO POR VAGA, POR PESSOA

Por que essa nota

Para quem tem conta, este bloco explica a nota em português — escrito sobre o seu histórico, não um texto genérico:

Aderência técnicapeso 0.45

Senioridadepeso 0.25

Localização e modelo de trabalhopeso 0.2

Setor e contextopeso 0.1

A seu favor

O que do seu histórico pesa a favor aqui.

O que falta

O que a vaga pede e seu currículo ainda não mostra.

Liberar meu relatório grátis

1 minuto: você envia o currículo, nós escrevemos o resto.

Ninguém caça sozinho. Esta vaga foi encontrada por outra pessoa e entrou no acervo de todo mundo. A caça continua enquanto você lê isto — e a sua parte do acervo (61.678 vagas, comparadas com o seu currículo) só passa a existir quando você entra.

O que você decide sobre cada vaga

Cada vaga vira um caso com histórico: candidatei, entrevista, proposta. Estes botões são os reais — só falta a conta.

Não é meu perfil Me candidatei FavoritarEntrevistando Proposta recebida Recusado Vaga encerrada Link não funciona

Descrição da vaga

About AvePoint:  Beyond Secure. AvePoint is the global leader in data security, governance, and resilience, going beyond traditional solutions to ensure a robust data foundation and enable organizations everywhere to collaborate with confidence. Over 25,000 customers worldwide rely on the AvePoint Confidence Platform to prepare, secure, and optimize their critical data across Microsoft, Google, Salesforce, and other collaboration environments. AvePoint’s global channel partner program includes approximately 5,000 managed service providers, value-added resellers, and systems integrators, with our solutions available in more than 100 cloud marketplaces. To learn more, visit <a id="menur238u" class="fui-Link ___1q1shib f2hkw1w f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1s184ao f1mk8lai fnbmjn9 f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh fhgqx19 f1olyrje f1p93eir f1nev41a f1h8hb77 f1lqvz6u f10aw75t fsle3fq f17ae5zn" href="https://www.avepoint.com/" target="_blank">www.avepoint.com</a>. At AvePoint, we are committed to investing in our people. Agility, passion and teamwork set us up to do our best work and foster a culture where you are empowered to craft your career, make an impact, and own (y)our future. Unleash the power of you! About the position:  The Principal Architect for Active Directory & Entra ID Backup and Recovery will be the foundational technical leader for AvePoint's hybrid identity resilience build strategy. This role is focused on the architecture of backup, restore, rollback, and disaster recovery capabilities for Active Directory (AD), Microsoft Entra ID, and hybrid AD/Entra environments.  This is a hands-on, deeply technical architecture role. The person in this role will define how AvePoint captures identity state, protects AD and Entra configuration, restores objects and attributes, handles hybrid source-of-authority rules, and supports complex enterprise topologies such as multi-domain forests, multiple forests, trusts, and Entra Connect / Cloud Sync environments.  This role is intentionally not the primary owner for AD/Entra threat detection, alert rule authoring, SIEM content, or incident response strategy. AvePoint expects to hire a separate AD/Entra security-focused role for ITDR and security detection. The architect in this role will partner closely with that security role, but the core responsibility here is the backup and recovery architecture: how to safely protect and restore Microsoft identity systems when disaster occurs.  The ideal candidate has built, operated, or deeply influenced Active Directory and Entra ID backup/recovery products or services, ideally at a vendor that protects AD, Entra ID, hybrid identity, or directory services at enterprise scale. They should be comfortable with both the low-level realities of AD recovery and the product engineering tradeoffs required to ship a scalable SaaS backup and recovery platform.  Specific responsibilities include, but are not limited to:  <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1">Own the end-to-end technical architecture for Active Directory and Microsoft Entra ID backup, restore, rollback, and disaster recovery capabilities. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="2" data-aria-level="1">Define the architecture for protecting AD objects, attributes, group memberships, OUs, GPOs, DNS-related state, SYSVOL, domain controllers, forest metadata, trust relationships, and other recovery-critical directory components. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="3" data-aria-level="1">Design restore workflows for object-level, attribute-level, group membership, OU, GPO, domain controller, and forest-level recovery, with clear sequencing, validation, retry, and rollback behavior. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="4" data-aria-level="1">Architect support for enterprise AD topologies, including single-domain/single-forest, multi-domain/single-forest, multi-forest, account/resource forest, forest trust, and hybrid AD-to-Entra scenarios. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="5" data-aria-level="1">Design the AD collection and backup model, including full-state snapshots, incremental change capture, LDAP/DirSync or equivalent mechanisms, event correlation where useful, system state / VSS considerations, and backup metadata required for reliable recovery. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="6" data-aria-level="1">Define the hybrid source-of-authority model for AD-synced and cloud-only objects, including Entra Connect / Cloud Sync behavior, sourceAnchor / ImmutableID mapping, hard-match and soft-match considerations, and recovery sequencing when AD is authoritative. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="7" data-aria-level="1">Extend AvePoint's existing Entra ID protection strategy into a coherent hybrid recovery architecture that understands which objects and settings should be restored in AD first, Entra first, or only in the cloud. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="8" data-aria-level="1">Partner with Product Management to define realistic MVP scope, phased delivery, technical tradeoffs, customer topology coverage, and acceptance criteria for AD and hybrid identity recovery. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="9" data-aria-level="1">Partner with Engineering to create architecture documents, data models, sequence diagrams, technical specifications, API expectations, lab plans, validation criteria, and reference implementations. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="10" data-aria-level="1">Prototype the highest-risk technical areas, such as AD state capture, object/attribute rollback, source-of-authority resolution, Entra Connect re-link validation, or forest recovery orchestration. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="11" data-aria-level="1">Define lab environments and test scenarios that reflect real customer complexity, including multi-domain forests, multi-forest trusts, hybrid Entra Connect environments, deleted-object recovery, and recovery after failed or partial restores. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="12" data-aria-level="1">Guide engineering decisions around backup consistency, restore ordering, data retention, metadata requirements, recovery point selection, validation checks, and operational reliability. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="13" data-aria-level="1">Collaborate with a dedicated AD/Entra security architect on privileged access, secure credential handling, identity attack scenarios, and ITDR signal integration, while keeping this role centered on recovery architecture. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="14" data-aria-level="1">Serve as the senior technical reviewer for AD and hybrid identity design decisions, ensuring the product is technically correct, scalable, supportable, and aligned with real-world enterprise identity environments. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="15" data-aria-level="1">Spend time with customers, partners, field engineers, and support teams to validate architecture against real-world AD and hybrid identity deployments. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="16" data-aria-level="1">Mentor internal engineers and architects on AD recovery concepts, hybrid identity behavior, and the operational realities of enterprise directory services. </li> </ul> What you will bring to our team:  <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="17" data-aria-level="1">Bachelor's degree in Computer Science, Engineering, Information Systems, or a related technical field; equivalent practical experience strongly considered. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="18" data-aria-level="1">12+ years of hands-on technical experience in identity infrastructure, directory services, infrastructure recovery, or enterprise systems engineering. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="19" data-aria-level="1">8+ years of deep Active Directory architecture experience, including design, operations, troubleshooting, migration, or recovery of enterprise AD environments. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="20" data-aria-level="1">Direct experience with Active Directory backup, restore, object rollback, domain controller recovery, forest recovery, or directory-service disaster recovery. Experience at an AD/Entra backup or recovery vendor is strongly preferred. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="21" data-aria-level="1">Strong understanding of AD internals, including domain controllers, NTDS.dit, System State, VSS, FSMO roles, RID pools, DSRM, AD-integrated DNS, SYSVOL/DFSR, Group Policy, tombstone/deleted-object lifecycle, Global Catalog, sites/services, replication, and trusts. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="22" data-aria-level="1">Hands-on experience with complex AD topologies such as multi-domain forests, multiple forests, forest trusts, account/resource forest models, mergers and acquisitions, or regulated/segmented directory environments. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="23" data-aria-level="1">Deep working knowledge of Microsoft Entra ID and hybrid identity, including Entra Connect / Cloud Sync, sourceAnchor / ImmutableID, hard match / soft match behavior, Microsoft Graph, administrative units, Conditional Access dependencies, and cloud-only versus synced object behavior. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="24" data-aria-level="1">Experience designing or operating backup and recovery workflows with clear RPO/RTO thinking, recovery point selection, validation, restore ordering, auditability, and customer-facing operational simplicity. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="25" data-aria-level="1">Ability to translate low-level directory behavior into product architecture that can be implemented by distributed engineering teams and understood by product, support, sales engineering, and executive stakeholders. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="26" data-aria-level="1">Strong scripting and automation experience, especially with PowerShell, LDAP tooling, Microsoft Graph, Windows Server administration, and lab automation. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="27" data-aria-level="1">Demonstrated track record of designing and shipping deeply technical infrastructure, identity, or data protection products at scale. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="28" data-aria-level="1">Outstanding written and verbal communication skills; able to explain AD and hybrid identity recovery tradeoffs to deeply technical engineers, field architects, executives, and customers. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="29" data-aria-level="1">Bonus: Direct experience at, or deep familiarity with, vendors such as Quest, Semperis, Cayosoft, Netwrix, Commvault, Rubrik, Druva, Veeam, Microsoft, or similar identity/data protection vendors. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="30" data-aria-level="1">Bonus: Experience with AD migrations, tenant-to-tenant migrations, Entra ID backup/recovery, Okta/AD integration, or hybrid identity modernization. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="31" data-aria-level="1">Bonus: Microsoft MVP recognition, Microsoft identity certifications, or public technical speaking/writing history in AD, Entra ID, or directory services. </li> </ul> The Salary Range for this role is $180,000k - $270,000. At AvePoint, we strive to offer competitive, fair, and equitable total rewards. The listed salary range represents a good faith estimate, with final offers based on location, experience, skills, and qualifications. The listed range reflects base salary only; our total rewards include base salary, comprehensive benefits (medical, dental, vision, 401(k) with match, unlimited PTO), and depending on the role, bonuses, commissions, or equity (RSUs). We welcome compensation discussions—apply even if your expectations fall outside the range.<div class="content-conclusion">Any personal data you share with us during the application process will be processed strictly in compliance with applicable data protection laws and our <a id="menur12n" class="fui-Link ___1q1shib f2hkw1w f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1s184ao f1mk8lai fnbmjn9 f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh fhgqx19 f1olyrje f1p93eir f1nev41a f1h8hb77 f1lqvz6u f10aw75t fsle3fq f17ae5zn" href="https://www.avepoint.com/company/privacy-notice" target="_blank">Privacy Notice</a>.</div>

Vale a pena me candidatar? Ver minha nota

Leu tudo e ficou na dúvida? É exatamente isso que a nota resolve.

Por que criar conta agora

Leva 1 minuto

Envie o currículo e pronto. Sem formulário longo, sem questionário, sem teste.

Grátis de verdade

Sem cartão, sem período de teste que expira. Seu currículo só gera as suas notas.

Já tem vaga esperando

61.678 vagas encontradas nos últimos 30 dias — a sua nota nesta e em todas as outras sai assim que o currículo chega.

Criar conta grátis