The English-language job board for Spain

Senior Active Directory Architect

Hybrid in Barcelona·Added 3 months ago

This job was published 3 months ago

SYNLAB

7 open roles

Apply

Overview

Job details

Hybrid
Office and home days — the ad has the split.

Requirements

Have the right to work in Spain
SYNLAB doesn't mention sponsorship in the ad.
Be near Barcelona, Spain (Hybrid) for hybrid days
No relocation package mentioned.
Have senior-level experience
Senior-level role.

Requirements

What we're looking for

Strong experience designing and operating enterprise Active Directory environments.
Experience working in large, complex AD environments (multiple domains, trusts, or distributed environments).
Deep knowledge of AD domain architecture, OU structure and delegation models, Group Policy architecture, authentication and identity security.
Ability to analyze legacy environments and define practical remediations.
Deep knowledge of directory synchronization (Entra ID Connect/Cloud Sync).
Solid understanding of Microsoft Entra ID administration beyond synchronization, including authentication methods, hybrid identity design, and identity-related access controls.
Experience with Exchange hybrid identity dependencies, including recipient-related Active Directory attributes and operational considerations.
Good understanding of identity dependencies for Microsoft Intune and Entra-joined / hybrid-joined devices.
Experience with identity lifecycle automation and provisioning flows across HR systems, Active Directory, and Microsoft Entra ID.
Strong troubleshooting capabilities in complex identity infrastructures.
Ability to handle both architectural topics and deep technical issues.
Ability to work independently, drive delivery end-to-end, and follow through to completion.
Clear communication skills (technical topics to mixed audiences) and solid documentation habits.
Exposure to broader Microsoft 365 services and their dependency on hybrid identity design.
Knowledge of identity governance or privileged access solutions

The role

What you'll do

Assess and document the current Active Directory landscape across multiple environments.
Define and implement target architecture and standards for Active Directory.
Improve OU structures, delegation models, tiering, and Group Policy design.
Address architectural inconsistencies and legacy configuration issues.
Lead remediation of architectural weaknesses, security findings, and legacy Active Directory issues.
Troubleshoot complex directory and authentication issues across domains and hybrid environments.
Drive improvements in directory design, authentication, and operational resilience.
Strengthen Active Directory resiliency, recovery preparedness, and restore processes.
Ensure reliable integration between Active Directory and Microsoft Entra ID.
Support and improve directory synchronization architecture, troubleshooting, and operational stability.
Contribute to standards for authentication, administration, and lifecycle processes across hybrid identity.
Provide architectural input into identity-related dependencies across Microsoft 365, particularly Microsoft Entra ID, Exchange hybrid, and endpoint identity integration with Intune.
Support design decisions affecting access, device identity, and cloud-connected provisioning.
Act as the technical authority for Active Directory within the Workplace team.
Provide technical guidance to the team.
Support identity-related architectural decisions across infrastructure projects.
Work closely with infrastructure and application teams across the organization.
Align directory and hybrid identity design with broader infrastructure and security initiatives.
Support technical workshops and coordination with country IT teams where required

Example deliverables in the role

Active Directory current-state architecture documentation covering domains, trusts, OU structure, delegation model, and Group Policy design.
Technical review and validation of the target Active Directory architecture proposed by an external project partner.
Implementation roadmap translating architecture recommendations into prioritized technical work for the team.
Standardized enterprise design for Active Directory structure, including OU hierarchy, delegation model, and Group Policy architecture.
Technical guidelines and implementation standards for integrating Active Directory with Microsoft Entra ID and maintaining reliable directory synchronization.
Architecture principles and operational standards for Active Directory and hybrid identity environments.
Active Directory resiliency review covering backup scope, restore preparedness, and forest recovery readiness.

Working style

Proactively identifies risks, structural weaknesses, and improvement opportunities, and drives them through to practical implementation.
Works effectively in complex and ambiguous environments, bringing structure, priorities, and clear technical direction.
Translates architectural concepts into actionable next steps and supports delivery through the internal engineering team.
Balances strategic design with hands-on pragmatism, ensuring solutions are supportable and realistic in the operational environment.
Thinks in systems: understands dependencies across Active Directory, hybrid identity, infrastructure, and security, and designs accordingly.
Challenges assumptions and proposed solutions constructively, including from external partners, to ensure technical quality and long-term maintainability.
Promotes standardization, resiliency, and reduction of technical debt without losing focus on operational stability.

About SYNLAB

SYNLAB is a European provider of medical laboratory diagnostics, offering testing services and innovative diagnostic solutions for doctors, clinics, and patients. The company describes itself as a European market leader in laboratory diagnostic services and operates in more than 20 countries with a presence on four continents, generating EUR 2.54 billion in revenue in 2025 with more than 23,000 employees, including over 2,000 medical experts.

SYNLAB has a presence in Spain through its Spanish website (synlab.es) and currently lists open positions in Spain, largely in corporate IT functions such as SAP consulting, IT infrastructure, and network administration. The company states it fosters a working environment where employees feel respected, supported and encouraged, and values a diverse and inclusive workforce.

Industry: Clinical Laboratories
Employees: >23,000
Website: synlab.es

Good to know if you are moving

SYNLAB operates in more than 20 countries with a presence on four continents, giving it a broad international footprint.
The group reported EUR 2.54 BN revenue in 2025 and employs more than 23,000 people, including over 2,000 medical experts.
Current open roles in Spain include IT positions such as 'Internal SAP Senior Consultant Finance & Controlling (f/m)', 'Network Administrator (m/f/d)', and 'IT Infrastructure Relationship Manager (m/f/x)'.
SYNLAB states it values 'a diverse and inclusive workforce in creating a thriving working environment'.

All open roles at SYNLAB