Microsoft Security Active Directory Senior Consultant

Experteer Overview In this role, you drive Active Directory-focused engagements to design, secure, migrate, and operate enterprise identity environments. You’ll work within Deloitte Cyber to elevate identity and access security for clients, tackling architecture, hardening, and hybrid identity challenges. You will lead initiatives that improve resilience and streamline identity workflows at scale. This is a hands-on leadership role that blends technical depth with program management to deliver measurable security outcomes. Compensation / Benefits * Lead AD and identity infrastructure engagements across assessment, design, migration, implementation, stabilization, and post-implementation phases * Conduct and oversee AD assessments covering architecture, DNS, DHCP, replication, trusts, GPOs, service accounts, and authentication processes * Design and implement AD security/hardening improvements including tiering, RBAC, service account management, GPO controls, and threat detection/recovery * Architect and support enterprise AD environments, including hybrid identity with Entra ID, federation, and synchronization * Lead or support domain/forest migrations, separations, consolidations including discovery, dependency analysis, cutover planning, validation, rollback, and post-migration stabilization Tasks * Bachelor in Computer Science * 4+ years in technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience designing securing assessing migrating or operating Microsoft AD environments * Experience with AD services: domain/forest architecture, DNS, DHCP, Sites and Services, Group Policy, trusts, LDAP, and recovery * Experience leading or supporting AD domain/forest migrations, separations, or consolidations * Experience with migration tooling (e.g., Quest ODM, Semperis) * Experience with identity threat detection, cyber recovery, or related tooling (Semperis, Rubrik, Microsoft Defender for Identity) * Ability to travel up to 50% Key requirements *

_ * Architect and support enterprise AD environments, including hybrid identity with Entra ID, federation, and synchronization * Lead or support domain/forest migrations, separations, consolidations including discovery, dependency analysis, cutover planning, validation, rollback, and post-migration stabilization Tasks * Bachelor in Computer Science * 4+ years in technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience designing securing assessing migrating or operating Microsoft AD environments * Experience with AD services: domain/forest architecture, DNS, DHCP, Sites and Services, Group Policy, trusts, LDAP, and recovery * Experience leading or supporting AD domain/forest migrations, separations, or consolidations * Experience with migration tooling (e.g., Quest ODM, Semperis) * Experience with identity threat detection, cyber recovery, or related tooling (Semperis, Rubrik, Microsoft Defender for Identity) * Ability to travel up to 50% Key requirements *