Microsoft Security Active Directory Senior Consultant

Experteer Overview In this role you will lead AD and identity infrastructure engagements to strengthen clients’ security and hybrid identity capabilities. You’ll work across assessment, design, migration, and post-implementation phases to modernize identity environments. You will collaborate with cross-functional teams to deliver secure, scalable Active Directory solutions and migrations that align with clients’ risk and resilience goals. This is a hands-on leadership role with a focus on architecture, security hardening, and enterprise integration. Compensation / Benefits * Lead Active Directory and identity infrastructure engagements across full project lifecycle * Perform and oversee AD assessments covering domain/forest architecture, DCs, DNS/DHCP, replication, trusts, GPOs, and service accounts * Design and implement AD security and hardening (tiering, RBAC, service accounts, GPO controls, identity threat recovery) * Architect and support enterprise AD environments, including hybrid identity with Microsoft Entra ID, federation, and synchronization * Lead or support domain/forest migrations, separations, consolidations (discovery, dependency analysis, cutover, validation, rollback, stabilization) Tasks * Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, or another technical field * 4+ years of experience in technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience designing, securing, assessing, migrating, or operating Microsoft Active Directory environments * Experience with enterprise AD services (domain/forest architecture, DCs, DNS, DHCP, Sites and Services, Group Policy, trusts, service accounts, LDAP, recovery) * Experience leading or supporting AD migrations, separations, or consolidations * Experience with migration tooling (Quest On Demand Migration or Semperis) * Experience with identity threat detection, identity resilience, cyber recovery, or recovery validation tooling (Semperis, Rubrik, Microsoft Defender for Identity) * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements * discretionary annual incentive program

and identity with Microsoft Entra ID, federation, and synchronization * Lead or support domain/forest migrations, separations, consolidations (discovery, dependency analysis, cutover, validation, rollback, stabilization) Tasks * Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, or another technical field * 4+ years of experience in technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience designing, securing, assessing, migrating, or operating Microsoft Active Directory environments * Experience with enterprise AD services (domain/forest architecture, DCs, DNS, DHCP, Sites and Services, Group Policy, trusts, service accounts, LDAP, recovery) * Experience leading or supporting AD migrations, separations, or consolidations * Experience with migration tooling (Quest On Demand Migration or Semperis) * Experience with identity threat detection, identity resilience, cyber aaaaa aaM_ or recovery validation tooling (Semperis, Rubrik, Microsoft Defender for Identity) * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements * discretionary annual incentive program