Job description

Further, we are the spouses, children, siblings, friends, and neighbors of those that need care—and we bring those experiences with us to work in serving our millions of policyholders each day. We apply that same compassion and empathy as we work with each other and our local communities. Genworth values all perspectives, characteristics, and experiences so that employees can bring their full, authentic selves to work to help each other and our company succeed. We celebrate our diversity and understand that being intentional about inclusion is the only way to create a sense of belonging for all associates. We also invest in the vitality of our local communities through grants from the Genworth Foundation, event sponsorships, and employee volunteerism. We care about the people that make up our customers, colleagues, and communities. We do what’s best for our customers and collaborate to drive progress. Senior Directory Services Architect This position is available to Virginia residents as Richmond hybrid in-office applicants or remote applicants residing in states/locations under Eastern or Central Standard Time: Alabama, Arkansas, Connecticut, Delaware, Florida, Georgia, Illinois, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maine, Maryland, Massachusetts, Michigan, Minnesota, Mississippi, Missouri, Nebraska, New Hampshire, New Jersey, New York, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, Rhode Island, South Carolina, South Dakota, Tennessee, Texas, Vermont, Virginia, Washington DC, West Virginia or Wisconsin. • Hybrid in-office would be required if you reside within 50 miles of our Richmond, VA office. Required in-office days are Tuesdays & Wednesdays. Genworth is seeking a highly skilled Senior Directory Services Architect to lead the design, implementation, and management of our on-premises Active Directory infrastructure including DNS and its integration with Microsoft Entra ID for cloud-based identity and access management. The ideal candidate will possess strong project leadership, communication, and cross-functional collaboration skills. Architecture Design and Management Design and implement scalable, secure, and resilient high availability Active Directory (AD), DNS, and Microsoft Entra ID (formerly Azure AD) architectures across a hybrid environment. Lead configuration of AD Sites and Services, replication, DNS, DHCP, and Group Policy Objects (GPOs). Develop and maintain architectural blueprints, including forests, domains, trust relationships, replication topologies, and GPO structures. Ensure architectural compliance with Genworth’s enterprise standards, security policies, and regulatory requirements. Architect and implement secure identity solutions using Microsoft Entra ID, including support for external identities, federation and cross-tenant collaboration. Configure and manage user flows, Conditional Access policies, and lifecycle workflows for external partners and vendors. Collaborate with business units and stakeholders to define access requirements, streamline onboarding/offboarding workflows, and enforce Conditional Access and MFA policies. Support integration of Genworth’s identity infrastructure with SaaS platforms, cloud services, and partner ecosystems. Ensure high availability (HA) and disaster recovery (DR) readiness for AD/Entra ID environments, minimizing downtime and data loss. Conduct regular testing and validation of DR plans to ensure rapid recovery in case of outages or incidents. Monitor system performance and proactively address potential issues to maintain service reliability. Strategic Planning and Continuous Improvement maintain scripts and automation pipelines. Oversee implementation phases, ensuring alignment with architectural plans and resolving technical issues. Collaborate cross-functionally with Enterprise Architecture, Security, Compliance, and other business teams to align solutions with organizational needs. Foster a collaborative, inclusive, and high-performance team culture aligned with Genworth’s values. Maintain comprehensive documentation of AD/Entra ID architecture, configurations, policies, and procedures. Provide regular reports to IT leadership on AD/Entra ID performance, health, security posture, and project status. 10+ years of IT experience, with 5+ years in enterprise-scale AD/Entra ID architecture and engineering. • Proficiency in AD DS, DNS, GPO, LDAP, Microsoft Entra ID (IAM, RBAC, and MFA), and managing hybrid environments. • Strong understanding of resilient infrastructure design, including business continuity planning (BCP) and disaster recovery (DR) for directory services. • Proven ability to lead complex technical projects and communicate with both technical and non-technical stakeholders. Bachelor’s degree in Computer Science, IT, or related field. Certifications such as Microsoft Certified: Azure Administrator Associate or Microsoft 365 Certified: financial services, healthcare, government). Familiarity with AWS and Azure environments. Comprehensive Healthcare Coverage Auto Enrollment in Employer-Directed Retirement Account Feature (100% employer-funded!) Generous Paid Time Off – Including 12 Paid Holidays, Volunteer Time Off and Paid Family Leave Disability, Life, and Long Term Care Insurance Tuition Reimbursement, Student Loan Repayment and Training & Certification Support Wellness support including gym membership reimbursement and Employee Assistance Program resources (work/life support, financial & legal management) The final determination on base pay for this position will be based on multiple factors at the time of this job posting including but not limited to geographic location, experience, and qualifications to ensure pay equity within the organization.

Requirements