Azure Active Directory Domain Services is full-fat AD, but they market it towards only using it for services in Azure. But you can set up a VPN from Azure to join on-prem stuff (or to replicate existing AD to Azure).

https://docs.microsoft.com/en-us/azure/active-directory-doma...