Microsoft Security Active Directory Senior Consultant

Deloitte T.T.L.
Colorado Springs, CO, United States
2 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
4 years minimum
Working hours
Regular working hours

Tech stack

Active Directory Dynamic Host Configuration Protocol Domain Name System (DNS) Identity and Access Management Intrusion Detection and Prevention Lightweight Directory Access Protocols (LDAP) Microsoft Security Essentials Role-Based Access Control Azure Active Directory

Job description

Experteer Overview In this role, you lead AD and identity-focused initiatives to strengthen and modernize enterprise identity environments. You collaborate with cross-functional teams to design, migrate, and secure Active Directory and hybrid identity solutions, improving resilience and trust across client environments. You will address complex migration projects and post-migration stabilization, delivering scalable identity architectures. This is a chance to influence security outcomes for diverse clients within Deloitte Cyber’s mission-driven culture. Compensation / Benefits * Lead Active Directory engagements across assessment, design, migration, implementation, and stabilization phases * Perform comprehensive AD assessments covering architecture, DNS/DHCP, replication, Group Policy, trusts, and authentication processes * Design and implement AD security hardening (RBAC, administrative tiering, GPO controls, service account management) * Architect and support enterprise AD environments including hybrid identity with Microsoft Entra ID and federation * Lead or support domain/forest migrations, including discovery, dependency analysis, cutover planning, validation, rollback, and post-migration stabilization Tasks * Bachelor’s degree in a technical field * 4+ years in technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience with Microsoft Active Directory environments * Experience with domain/forest architecture, DNS, DHCP, Group Policy, LDAP, trusts, service accounts, and domain/forest recovery * Experience leading or supporting AD migrations, separations, or consolidations * Experience with migration tooling such as Quest On Demand Migration or Semperis * Experience with identity threat detection or cyber recovery tooling (Semperis, Rubrik, Microsoft Defender for Identity) * Ability to travel up to 50% Key requirements *

Requirements

you including hybrid identity with Microsoft Entra ID and federation * Lead or support domain/forest migrations, including discovery, dependency analysis, cutover planning, validation, rollback, and post-migration stabilization Tasks * Bachelor’s degree in a technical field * 4+ years in technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience with Microsoft Active Directory environments * Experience with domain/forest architecture, DNS, DHCP, Group Policy, LDAP, trusts, service accounts, and domain/forest recovery * Experience leading or supporting AD migrations, separations, or consolidations * Experience with migration tooling such as Quest On Demand Migration or Semperis * Experience with identity threat detection or cyber recovery tooling (Semperis, Rubrik, Microsoft Defender for Identity) * Ability to travel up to 50% Key requirements *

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

3:18 min

Eliminating passwords using Azure managed identities

Markus Möller · WWC 2021

3:46 min

Navigating a career in cloud transformation consulting

Piet Van Dongen Ā· LIVE

3:15 min

Understanding dependency trees and DNS resolution mechanics

Ali Alp Ali Alp Ā· WWC Europe 2026

1:45 min

Evolution from manual setups to automated monolith deployments

Axel Barbier Ā· WWC 2023

1:20 min

Identifying multi-disciplinary talent for developer experience engineering roles

Hazal Mestci +1 Ā· Coffee With Developers

4:42 min

Executing safe traffic routing using intermediate DNS

Ainhoa Arruabarrena Ortiz Ainhoa Arruabarrena Ortiz +2 Ā· WWC Europe 2026

Videos

See all

Related articles

See all