> Markdown version of [/jobs/ext/2015649-microsoft-security-active-directory-senior-consultant](https://www.wearedevelopers.com/jobs/ext/2015649-microsoft-security-active-directory-senior-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Microsoft Security Active Directory Senior Consultant

- **Company:** Deloitte T.T.L.
- **Location:** San Francisco, CA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Active Directory, Authentication Protocols, Dynamic Host Configuration Protocol, Domain Name System (DNS), Identity and Access Management, Intrusion Detection and Prevention, Lightweight Directory Access Protocols (LDAP), Microsoft Security Essentials, Role-Based Access Control
- **Published:** August 10, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/microsoft-security-active-directory-senior-consultant-san-francisco-ca-usa-58883372

## About the Role

_ service accounts, authentication protocols, and admin processes * Design and implement AD security hardening, including tiering, RBAC, service account management, GPO controls, and identity threat recovery * Architect and support enterprise AD environments with hybrid identity integrations, Entra ID, federation, and synchronization * Lead or support domain/forest migrations, separations, or consolidations with discovery, dependency analysis, cutover planning, validation, rollback, and post-migration stabilization Tasks * Bachelor's degree in a technical field * 4+ years of technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience designing, securing, assessing, migrating, or operating Microsoft AD * Experience with domain/forest architecture, DNS, DHCP, LDAP, GPO, trusts, replication, and recovery * Experience leading or supporting AD migrations, separations, or consolidations * Experience with migration tooling (Quest ODM or aaa
aaaaG_ * Experience with identity threat detection, cyber recovery, or related tooling (Semperis, Rubrik, or Defender for Identity) * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements *

## Description

Experteer Overview In this role you lead and shape Active Directory and identity infrastructure engagements, advancing resilient, secure, and hybrid identity environments. You will partner with cross-functional teams to design, migrate, and optimize AD solutions that align with client security objectives. The position offers impactful work on domain/forest architectures, security hardening, and enterprise identity strategies at scale. You'll contribute to critical migrations and post-implementation stabilization, helping clients manage cyber risk confidently. This role fits Deloitte's mission to strengthen trust in digital environments and modernize identity platforms for diverse clients. Compensation / Benefits * Lead Active Directory and identity infrastructure engagements across assessment, design, migration, implementation, stabilization, and post-implementation phases * Oversee Active Directory assessments including architecture, DNS, DHCP, replication, GPO, trusts, privileged groups, service accounts, authentication protocols, and admin processes * Design and implement AD security hardening, including tiering, RBAC, service account management, GPO controls, and identity threat recovery * Architect and support enterprise AD environments with hybrid identity integrations, Entra ID, federation, and synchronization * Lead or support domain/forest migrations, separations, or consolidations with discovery, dependency analysis, cutover planning, validation, rollback, and post-migration stabilization Tasks * Bachelor's degree in a technical field * 4+ years of technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience designing, securing, assessing, migrating, or operating Microsoft AD * Experience with domain/forest architecture, DNS, DHCP, LDAP, GPO, trusts, replication, and recovery * Experience leading or supporting AD migrations, separations, or consolidations * Experience with migration tooling (Quest ODM or Semperis) * Experience with identity threat detection, cyber recovery, or related tooling (Semperis, Rubrik, or Defender for Identity) * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements *


## Related Videos

- [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba)
- [From Build to Breach: Hacking Kubernetes Through the Supply Chain](https://www.wearedevelopers.com/videos/100183-from-build-to-breach-hacking-kubernetes-through-the-supply-chain)
- [SSO with Ethereum and Next JS](https://www.wearedevelopers.com/videos/288-sso-with-ethereum-and-next-js)
- [MCP Mashups: How AI Agents are Reviving the Programmable Web](https://www.wearedevelopers.com/videos/1392-mcp-mashups-how-ai-agents-are-reviving-the-programmable-web)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Fireside Chat with Sir Tim Berners-Lee](https://www.wearedevelopers.com/videos/595-fireside-chat-with-sir-tim-berners-lee)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)