Microsoft Security Active Directory Senior Consultant

Experteer Overview In this role you drive identity and access security initiatives within Deloitte’s Cyber team, focusing on Active Directory architecture, security enhancements, and hybrid identity integrations. You will lead engagements across assessment, design, migration, and stabilization, influencing enterprise identity environments for clients. You will work with cross-functional teams to deliver resilient, secure identity platforms and enable seamless digital interactions. This is a hands-on leadership role with a clear impact on client security posture and identity strategy. Compensation / Benefits * Lead Active Directory and identity infrastructure engagements across assessment, design, migration, implementation, stabilization, and post-implementation phases * Conduct and oversee Active Directory assessments covering architecture components (DNS/DHCP, Domain Controllers, replication, trusts, GPOs, service accounts, LDAP) and administrative processes * Design and implement AD security hardening (tiering, RBAC, service account governance, GPO controls, identity threat detection and recovery) * Architect and support enterprise AD environments with hybrid identity (Entra ID, federation, synchronization, app dependencies) * Lead or support domain/forest migrations, including discovery, dependency analysis, cutover planning, validation, rollback, and post-migration stabilization Tasks * Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, or another technical field * 4+ years of technical consulting, enterprise infrastructure, identity security, or AD engineering experience * 4+ years hands-on experience designing, securing, assessing, migrating, or operating Microsoft Active Directory environments * Experience with enterprise AD services: domain/forest architecture, domain controllers, DNS, DHCP, Sites and Services, Group Policy, trusts, service accounts, LDAP, and recovery * Experience leading or supporting AD domain/forest migrations, separations, or consolidations * Experience with migration tooling (Quest ODM or Semperis) * Experience with identity threat detection, identity resilience, cyber recovery, or recovery tooling (Semperis, Rubrik, Microsoft Defender for Identity) * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements * Discretionary annual incentive program

security hardening (tiering, RBAC, service account governance, GPO controls, identity threat detection and recovery) * Architect and support enterprise AD environments with hybrid identity (Entra ID, federation, synchronization, app dependencies) * Lead or support domain/forest migrations, including discovery, dependency analysis, cutover planning, validation, rollback, and post-migration stabilization Tasks * Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, or another technical field * 4+ years of technical consulting, enterprise infrastructure, identity security, or AD engineering experience * 4+ years hands-on experience designing, securing, assessing, migrating, or operating Microsoft Active Directory environments * Experience with enterprise AD services: domain/forest architecture, domain controllers, DNS, DHCP, Sites and Services, Group Policy, trusts, service accounts, LDAP, and recovery * Experience leading or supporting AD domain/forest migrations, separations, or consolidations * Experience with migration tooling (Quest ODM or Semperis) * Experience with identity threat detection, identity resilience, cyber recovery, or recovery tooling (Semperis, Rubrik, Microsoft Defender for Identity) * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements * Discretionary annual incentive program