Microsoft Security Active Directory Senior Consultant

Experteer Overview In this role you lead and shape Active Directory and identity infrastructure engagements, advancing resilient, secure, and hybrid identity environments. You will partner with cross-functional teams to design, migrate, and optimize AD solutions that align with client security objectives. The position offers impactful work on domain/forest architectures, security hardening, and enterprise identity strategies at scale. You’ll contribute to critical migrations and post-implementation stabilization, helping clients manage cyber risk confidently. This role fits Deloitte’s mission to strengthen trust in digital environments and modernize identity platforms for diverse clients. Compensation / Benefits * Lead Active Directory and identity infrastructure engagements across assessment, design, migration, implementation, stabilization, and post-implementation phases * Oversee Active Directory assessments including architecture, DNS, DHCP, replication, GPO, trusts, privileged groups, service accounts, authentication protocols, and admin processes * Design and implement AD security hardening, including tiering, RBAC, service account management, GPO controls, and identity threat recovery * Architect and support enterprise AD environments with hybrid identity integrations, Entra ID, federation, and synchronization * Lead or support domain/forest migrations, separations, or consolidations with discovery, dependency analysis, cutover planning, validation, rollback, and post-migration stabilization Tasks * Bachelor’s degree in a technical field * 4+ years of technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience designing, securing, assessing, migrating, or operating Microsoft AD * Experience with domain/forest architecture, DNS, DHCP, LDAP, GPO, trusts, replication, and recovery * Experience leading or supporting AD migrations, separations, or consolidations * Experience with migration tooling (Quest ODM or Semperis) * Experience with identity threat detection, cyber recovery, or related tooling (Semperis, Rubrik, or Defender for Identity) * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements *

_ service accounts, authentication protocols, and admin processes * Design and implement AD security hardening, including tiering, RBAC, service account management, GPO controls, and identity threat recovery * Architect and support enterprise AD environments with hybrid identity integrations, Entra ID, federation, and synchronization * Lead or support domain/forest migrations, separations, or consolidations with discovery, dependency analysis, cutover planning, validation, rollback, and post-migration stabilization Tasks * Bachelor’s degree in a technical field * 4+ years of technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience designing, securing, assessing, migrating, or operating Microsoft AD * Experience with domain/forest architecture, DNS, DHCP, LDAP, GPO, trusts, replication, and recovery * Experience leading or supporting AD migrations, separations, or consolidations * Experience with migration tooling (Quest ODM or aaa aaaaG_ * Experience with identity threat detection, cyber recovery, or related tooling (Semperis, Rubrik, or Defender for Identity) * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements *