<p> </p> <p><strong>About AvePoint: </strong></p> <p><span data-teams="true">Beyond Secure. AvePoint is the global leader in data security, governance, and resilience, going beyond traditional solutions to ensure a robust data foundation and enable organizations everywhere to collaborate with confidence. Over 25,000 customers worldwide rely on the AvePoint Confidence Platform to prepare, secure, and optimize their critical data across Microsoft, Google, Salesforce, and other collaboration environments. AvePoint’s global channel partner program includes approximately 5,000 managed service providers, value-added resellers, and systems integrators, with our solutions available in more than 100 cloud marketplaces. To learn more, visit <a id="menur238u" class="fui-Link ___1q1shib f2hkw1w f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1s184ao f1mk8lai fnbmjn9 f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh fhgqx19 f1olyrje f1p93eir f1nev41a f1h8hb77 f1lqvz6u f10aw75t fsle3fq f17ae5zn" href="https://www.avepoint.com/" target="_blank"><strong>www.avepoint.com</strong></a>.</span></p> <p>At AvePoint, we are committed to investing in our people. Agility, passion and teamwork set us up to do our best work and foster a culture where you are empowered to craft your career, make an impact, and own (y)our future. Unleash the power of you!</p> <p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">About the position:</span></span></strong><span data-ccp-props="{"134245418":true,"134245529":true,"201341983":0,"335559738":240,"335559739":120,"335559740":259}"> </span></p> <p><span data-contrast="auto">The Principal Architect for Active Directory & Entra ID Backup and Recovery will be the foundational technical leader for AvePoint's hybrid identity resilience build strategy. This role is focused on the architecture of backup, restore, rollback, and disaster recovery capabilities for Active Directory (AD), Microsoft Entra ID, and hybrid AD/Entra environments.</span><span data-ccp-props="{"201341983":0,"335559739":100,"335559740":259}"> </span></p> <p><span data-contrast="auto">This is a hands-on, deeply technical architecture role. The person in this role will define how AvePoint captures identity state, protects AD and Entra configuration, restores objects and attributes, handles hybrid source-of-authority rules, and supports complex enterprise topologies such as multi-domain forests, multiple forests, trusts, and Entra Connect / Cloud Sync environments.</span><span data-ccp-props="{"201341983":0,"335559739":100,"335559740":259}"> </span></p> <p><span data-contrast="auto">This role is intentionally not the primary owner for AD/Entra threat detection, alert rule authoring, SIEM content, or incident response strategy. AvePoint expects to hire a separate AD/Entra security-focused role for ITDR and security detection. The architect in this role will partner closely with that security role, but the core responsibility here is the backup and recovery architecture: how to safely protect and restore Microsoft identity systems when disaster occurs.</span><span data-ccp-props="{"201341983":0,"335559739":100,"335559740":259}"> </span></p> <p><span data-contrast="auto">The ideal candidate has built, operated, or deeply influenced Active Directory and Entra ID backup/recovery products or services, ideally at a vendor that protects AD, Entra ID, hybrid identity, or directory services at enterprise scale. They should be comfortable with both the low-level realities of AD recovery and the product engineering tradeoffs required to ship a scalable SaaS backup and recovery platform.</span><span data-ccp-props="{"201341983":0,"335559739":100,"335559740":259}"> </span></p> <p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">Specific responsibilities include, but are not limited to:</span></span></strong><span data-ccp-props="{"134245418":true,"134245529":true,"201341983":0,"335559738":240,"335559739":120,"335559740":259}"> </span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto"><span data-ccp-parastyle="List Bullet">Own the end-to-end technical architecture for Active Directory and Microsoft Entra ID backup, restore, rollback, and disaster recovery capabilities.</span></span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":252}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto"><span data-ccp-parastyle="List Bullet">Define the architecture for protecting AD objects, attributes, group memberships, OUs, GPOs, DNS-related state, SYSVOL, domain controllers, forest metadata, trust relationships, and other recovery-critical directory components.</span></span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":252}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,