Microsoft Security Active Directory Senior Consultant

Experteer Overview As part of Deloitte Cyber, you help clients strengthen identity, access, and platform security. You will lead and modernize Active Directory environments, guiding projects from assessment to post-implementation stabilization. The role blends hands-on design with leadership of migrations and security hardening, delivering resilient identity infra for hybrid setups. You’ll work with cross-functional teams to solve complex authentication and governance challenges at scale. This is a chance to shape enterprise identity security and enable secure digital interactions for clients. Compensation / Benefits * Lead Active Directory and identity infrastructure engagements across assessment, design, migration, implementation, stabilization, and post-implementation phases * Perform and oversee AD assessments covering domain/forest architecture, DNS/DHCP, replication, trusts, GPOs, privileged groups, and authentication processes * Design and implement AD security and hardening, including tiering, RBAC, service accounts, GPO controls, and identity threat recovery * Architect and support enterprise AD environments, including hybrid identity integrations with Entra ID, federation, and synchronization * Lead or support domain/forest migrations, separations, consolidations, including discovery, planning, validation, rollback, and stabilization Tasks * Bachelor’s degree in Computer Science or related technical field * 4+ years in technical consulting, enterprise infrastructure, identity security, or AD engineering * Hands-on experience designing, securing, assessing, migrating, or operating Microsoft AD environments * Experience with AD services: domain/forest architecture, domain controllers, DNS, DHCP, Sites and Services, Group Policy, trusts, LDAP, recovery * Experience leading or supporting AD migrations or consolidations * Experience with migration tooling (Quest ODM or Semperis) * Experience with identity threat detection or recovery tooling (Semperis, Rubrik, Microsoft Defender for Identity) * Willingness to travel up to 50% Key requirements * discretionary annual incentive program * reasonable accommodations for people with disabilities

Active tiering, RBAC, service accounts, GPO controls, and identity threat recovery * Architect and support enterprise AD environments, including hybrid identity integrations with Entra ID, federation, and synchronization * Lead or support domain/forest migrations, separations, consolidations, including discovery, planning, validation, rollback, and stabilization Tasks * Bachelor’s degree in Computer Science or related technical field * 4+ years in technical consulting, enterprise infrastructure, identity security, or AD engineering * Hands-on experience designing, securing, assessing, migrating, or operating Microsoft AD environments * Experience with AD services: domain/forest architecture, domain controllers, DNS, DHCP, Sites and Services, Group Policy, trusts, LDAP, recovery * Experience leading or supporting AD migrations or consolidations * Experience with migration tooling (Quest ODM or Semperis) * Experience with identity threat detection or recovery tooling (Semperis, Rubrik, aaaaaa aJ_ Defender for Identity) * Willingness to travel up to 50% Key requirements * discretionary annual incentive program * reasonable accommodations for people with disabilities