Microsoft Identity Entra ID Senior Consultant

As a Senior Engineering Management Specialist on the Deloitte Cyber team, you will be responsible for:

• Assessing Microsoft Entra ID and Active Directory environments, including tenant configuration, hardening, identity governance and administration, multifactor authentication, single sign-on, conditional access, and identity provider migrations
• Architecting, designing, and implementing Active Directory and Microsoft Entra ID deployments, migrations, upgrades, domain consolidations, and domain migration activities
• Performing health checks, discovery, cleanup, and security assessments across Active Directory services, including Domain Name System, Dynamic Host Configuration Protocol, Group Policy, privileged groups, service accounts, and disaster recovery readiness
• Supporting application and directory integrations across Microsoft Entra ID, Active Directory, Lightweight Directory Access Protocol environments, Azure B2B, Azure B2C, Security Assertion Markup Language, OAuth, and OpenID Connect
• Advising clients on security operations, reporting, threat protection, troubleshooting, and post-implementation reviews for Microsoft identity platforms, including Microsoft Defender for Identity

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to lead projects or workstreams
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines

• Ability to provide clear guidance to others The team, Required:

• 4+ years of experience in technical consulting, client problem solving, and solution architecture for Microsoft identity platforms, including Active Directory and Microsoft Entra ID
• 4+ years of experience implementing and operating Microsoft Entra ID, including conditional access, single sign-on, multifactor authentication, Privileged Access Management, Privileged Identity Management, and application integrations
• 4+ years of experience implementing and operating Active Directory, including Active Directory Federation Services, domain cleanup, domain and forest recovery, Group Policy Objects, group Managed Service Accounts, security groups, trusts, and federation
• Bachelor’s degree in Computer Science, Cyber Security, Information Security, Engineering, Information Technology, or Master of Computer Applications
• Ability to travel 25-50%, on average, based on the work you do and the clients and industries/sectors you serve.

• Limited immigration sponsorship may be available. Preferred:

• 3+ years of experience with identity and access management protocols, including WS-Federation, Security Assertion Markup Language, OpenID Connect, and OAuth
• 3+ years of experience implementing identity and access management security solutions for Microsoft Active Directory
• One or more certifications such as Microsoft SC-300, Certified Cloud Security Professional, Certificate of Cloud Security Knowledge, Certified Information Systems Security Professional, Cisco Certified Network Professional, Cisco Certified Network Associate, Microsoft Certified Solutions Expert, or Microsoft Certified Solutions Associate The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $105,400 to $207,800.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.