Microsoft Security Active Directory Senior Consultant

Experteer Overview In this role you will lead Active Directory and identity infrastructure engagements to strengthen client resilience and modernize identity environments. You’ll work on assessments, design, migration, and stabilization, shaping secure AD architectures and hybrid identity solutions. You’ll collaborate with cross-functional teams to deliver secure, scalable identity systems that support client digital ecosystems. This is a hands-on, leadership-focused position with meaningful client impact and opportunities to influence identity security practices. Compensation / Benefits * Lead Active Directory and identity infrastructure engagements across all project phases (assessment, design, migration, implementation, stabilization, post-implementation) * Perform and oversee AD assessments covering architecture, DNS/DHCP, replication, group policy, trusts, service accounts, authentication protocols, and administrative processes * Design and implement AD security/hardening improvements (tiering, RBAC, GPOs, service accounts, identity threat detection/recovery) * Architect and support enterprise AD environments, including hybrid identity with Microsoft Entra ID, federation, synchronization, and application dependencies * Lead or support domain/forest migrations, separations, consolidations (discovery, dependency analysis, cutover planning, validation, rollback, post-migration stabilization) Tasks * Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, IT, or related field * 4+ years of technical consulting, enterprise infrastructure, identity security, or AD engineering experience * 4+ years hands-on experience designing, securing, assessing, migrating, or operating Microsoft AD environments * Experience with AD services (domain/forest architecture, domain controllers, DNS, DHCP, Sites and Services, Group Policy, trusts, LDAP, recovery) * Experience leading or supporting AD migrations, separations, or consolidations * Experience with migration tooling (Quest On Demand Migration or Semperis) * Experience with identity threat detection, identity resilience, cyber recovery, or recovery validation tooling (Semperis, Rubrik, Microsoft Defender for Identity) * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements * Discretionary annual incentive program * Reasonable accommodations * Travel flexibility (as part of client engagements)

and (tiering, RBAC, GPOs, service accounts, identity threat detection/recovery) * Architect and support enterprise AD environments, including hybrid identity with Microsoft Entra ID, federation, synchronization, and application dependencies * Lead or support domain/forest migrations, separations, consolidations (discovery, dependency analysis, cutover planning, validation, rollback, post-migration stabilization) Tasks * Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, IT, or related field * 4+ years of technical consulting, enterprise infrastructure, identity security, or AD engineering experience * 4+ years hands-on experience designing, securing, assessing, migrating, or operating Microsoft AD environments * Experience with AD services (domain/forest architecture, domain controllers, DNS, DHCP, Sites and Services, Group Policy, trusts, LDAP, recovery) * Experience leading or supporting AD migrations, separations, or consolidations * Experience with a aaaaaaG_ tooling (Quest On Demand Migration or Semperis) * Experience with identity threat detection, identity resilience, cyber recovery, or recovery validation tooling (Semperis, Rubrik, Microsoft Defender for Identity) * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements * Discretionary annual incentive program * Reasonable accommodations * Travel flexibility (as part of client engagements)