Microsoft Security Active Directory Senior Consultant

Deloitte T.T.L.
Gilbert, AZ, United States
2 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
4 years minimum
Working hours
Regular working hours

Tech stack

Active Directory Cyber Security Dynamic Host Configuration Protocol Domain Name System (DNS) Identity and Access Management Intrusion Detection and Prevention Lightweight Directory Access Protocols (LDAP) Microsoft Security Essentials Role-Based Access Control Information Technology

Job description

Experteer Overview In this role on Deloitte Cyber, you lead and deliver Active Directory and identity security engagements, helping clients strengthen resilience and modernize identity environments. You will partner with cross-functional teams to design, migrate, and operationalize secure AD and hybrid identity solutions that align with client risk and business goals. You’ll tackle complex migrations, architecture, and hardening efforts that enable trusted access across platforms. This position offers meaningful work shaping identity security at scale within a collaborative, outcomes-driven culture. Compensation / Benefits * Lead Active Directory and identity infrastructure engagements across all project phases (assessments, design, migration, implementation, stabilization, post-implementation). * Oversee AD assessments covering domain/forest architecture, DNS, DHCP, replication, GPO, trusts, service accounts, LDAP, and administration processes. * Design and implement AD security hardening including tiered administration, RBAC, service account governance, GPO controls, and identity threat recovery capabilities. * Architect and support enterprise AD environments with hybrid identity integrations (Entra ID) and federation/synchronization services. * Lead or support domain/forest migrations, separations, consolidations: discovery, dependency analysis, cutover planning, validation, rollback, stabilization. Tasks * Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, IT, or related field * 4+ years of experience in technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience designing, securing, assessing, migrating, or operating Microsoft Active Directory environments * Experience with AD services including domain/forest architecture, DNS, DHCP, Sites and Services, GPO, trusts, LDAP, recovery * Experience leading or supporting AD domain/forest migrations, separations, consolidations * Experience with migration tooling such as Quest On Demand Migration or Semperis migration capabilities * Experience with identity threat detection, identity resilience, cyber recovery, or recovery validation tooling (e.g., Semperis, Rubrik, Microsoft Defender for Identity) * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements * discretionary annual incentive program * reasonable accommodations * competitive compensation (range provided) * travel opportunities (up to 50%)

Requirements

and including tiered administration, RBAC, service account governance, GPO controls, and identity threat recovery capabilities. * Architect and support enterprise AD environments with hybrid identity integrations (Entra ID) and federation/synchronization services. * Lead or support domain/forest migrations, separations, consolidations: discovery, dependency analysis, cutover planning, validation, rollback, stabilization. Tasks * Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, IT, or related field * 4+ years of experience in technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience designing, securing, assessing, migrating, or operating Microsoft Active Directory environments * Experience with AD services including domain/forest architecture, DNS, DHCP, Sites and Services, GPO, trusts, LDAP, recovery * Experience leading or supporting AD domain/forest migrations, separations, consolidations * a technical with migration tooling such as Quest On Demand Migration or Semperis migration capabilities * Experience with identity threat detection, identity resilience, cyber recovery, or recovery validation tooling (e.g., Semperis, Rubrik, Microsoft Defender for Identity) * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements * discretionary annual incentive program * reasonable accommodations * competitive compensation (range provided) * travel opportunities (up to 50%)

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:11 min

Introduction to cloud-native application developer security

Micah Silverman Ā· WWC 2022

1:45 min

Evolution from manual setups to automated monolith deployments

Axel Barbier Ā· WWC 2023

42 sec

Energy forecasts and resource demands of information technology

Marjolein Pordon Ā· LIVE

1:45 min

Transitioning from software development to security roles

Stefania Chaplin Ā· WWC 2022

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger Ā· LIVE

3:46 min

Navigating a career in cloud transformation consulting

Piet Van Dongen Ā· LIVE

Videos

See all

Related articles

See all