Microsoft Security Active Directory Senior Consultant

Experteer Overview In this role you will lead Active Directory and identity infrastructure engagements, guiding assessments, design, migrations, and security hardening to strengthen clients’ identity and access security. You’ll work with cross-functional teams on hybrid identity solutions and enterprise AD environments, delivering secure, scalable identities. This position offers impact across clients’ digital trust and resilience, with opportunities to shape identity architecture and modernization efforts. You will drive complex migrations and post-migration stabilization to ensure lasting value. Compensation / Benefits * Lead AD and identity infrastructure engagements across assessment, design, migration, implementation, stabilization, and post-implementation phases * Perform and oversee AD assessments covering domain/forest architecture, DNS, DHCP, replication, trusts, GPOs, service accounts, authentication protocols, and admin processes * Design and implement AD security/hardening improvements (tiering, RBAC, service accounts, GPO controls, identity threat detection) * Architect and support enterprise AD environments, including hybrid Identity with Microsoft Entra ID, federation, synchronization, and application dependencies * Lead or support domain/forest migrations, separations, consolidations (discovery, dependency analysis, cutover planning, rollback, post-migration stabilization) Tasks * Bachelor’s degree in a technical field * 4+ years in technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience designing/securing/migrating/operating Microsoft Active Directory environments * Experience with AD services: domain/forest architecture, DCs, DNS, DHCP, Sites/Services, GPOs, trusts, service accounts, LDAP, recovery * Experience leading/supporting AD migrations, separations, or consolidations * Experience with migration tooling (Quest ODM or Semperis) * Experience with identity threat detection, cyber recovery tools (Semperis, Rubrik, Microsoft Defender for Identity) * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements *

strengthen (tiering, RBAC, service accounts, GPO controls, identity threat detection) * Architect and support enterprise AD environments, including hybrid Identity with Microsoft Entra ID, federation, synchronization, and application dependencies * Lead or support domain/forest migrations, separations, consolidations (discovery, dependency analysis, cutover planning, rollback, post-migration stabilization) Tasks * Bachelor’s degree in a technical field * 4+ years in technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience designing/securing/migrating/operating Microsoft Active Directory environments * Experience with AD services: domain/forest architecture, DCs, DNS, DHCP, Sites/Services, GPOs, trusts, service accounts, LDAP, recovery * Experience leading/supporting AD migrations, separations, or consolidations * Experience with migration tooling (Quest ODM or Semperis) * Experience with identity threat detection, cyber recovery a with (Semperis, Rubrik, Microsoft Defender for Identity) * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements *