Principal Security Architect, Active Directory & Entra ID Backup and Recovery

The Principal Architect for Active Directory & Entra ID Backup and Recovery will be the foundational technical leader for AvePoint's hybrid identity resilience build strategy. This role is focused on the architecture of backup, restore, rollback, and disaster recovery capabilities for Active Directory (AD), Microsoft Entra ID, and hybrid AD/Entra environments.

This is a hands-on, deeply technical architecture role. The person in this role will define how AvePoint captures identity state, protects AD and Entra configuration, restores objects and attributes, handles hybrid source-of-authority rules, and supports complex enterprise topologies such as multi-domain forests, multiple forests, trusts, and Entra Connect / Cloud Sync environments.

This role is intentionally not the primary owner for AD/Entra threat detection, alert rule authoring, SIEM content, or incident response strategy. AvePoint expects to hire a separate AD/Entra security-focused role for ITDR and security detection. The architect in this role will partner closely with that security role, but the core responsibility here is the backup and recovery architecture: how to safely protect and restore Microsoft identity systems when disaster occurs.