Microsoft Security Active Directory Senior Consultant

Experteer Overview In this role, you will lead Active Directory and identity infrastructure engagements within Deloitte Cyber, driving assessments, design, migration, and hardening to strengthen client identity security. You’ll shape hybrid identity solutions with Entra ID and support complex domain migrations for diverse organizations. You’ll work with cross-functional teams to deliver secure, scalable identity infrastructure that enables confident digital interactions. This position offers meaningful impact through architecture-led security and identity resilience. Compensation / Benefits * Lead Active Directory engagements across assessment, design, migration, implementation, stabilization, and post-implementation phases * Perform and oversee AD assessments covering architecture, DNS, DHCP, replication, GPOs, trusts, service accounts, authentication protocols, and admin processes * Design and implement AD security hardening, including RBAC, admin tiering, and identity threat detection * Architect and support enterprise AD environments, including hybrid Identity with Entra ID, federation, and synchronization * Lead or support domain/forest migrations, including discovery, dependency analysis, cutover planning, validation, rollback, and post-migration stabilization Tasks * Bachelor in Computer Science or related technical field * 4+ years of experience in technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience designing, securing, assessing, migrating, or operating Microsoft AD environments * Experience with AD services: domain/forest architecture, DNS/DHCP, Sites and Services, Group Policy, trusts, LDAP, recovery * Experience leading or supporting AD domain/forest migrations, separations, or consolidations * Experience with migration tooling (e.g., Quest ODM or Semperis) * Experience with identity threat detection, cyber recovery, or recovery validation tooling (e.g., Semperis, Rubrik, Microsoft Defender for Identity) * Ability to travel up to 50% Key requirements * Discretionary annual incentive program

• Architect and support enterprise AD environments, including hybrid Identity with Entra ID, federation, and synchronization * Lead or support domain/forest migrations, including discovery, dependency analysis, cutover planning, validation, rollback, and post-migration stabilization Tasks * Bachelor in Computer Science or related technical field * 4+ years of experience in technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience designing, securing, assessing, migrating, or operating Microsoft AD environments * Experience with AD services: domain/forest architecture, DNS/DHCP, Sites and Services, Group Policy, trusts, LDAP, recovery * Experience leading or supporting AD domain/forest migrations, separations, or consolidations * Experience with migration tooling (e.g., Quest ODM or Semperis) * Experience with identity threat detection, cyber recovery, or recovery validation tooling (e.g., Semperis, Rubrik, Microsoft Defender for aa aaaaaM_ * Ability to travel up to 50% Key requirements * Discretionary annual incentive program