Microsoft Security Active Directory Senior Consultant

Experteer Overview In this role, you help clients strengthen identity and access security by leading Active Directory and identity infrastructure initiatives. You’ll drive assessments, design, migrations, and post-implementation stabilization, shaping secure, scalable environments. You work with cross-functional teams to implement strong governance, RBAC, and identity threat recovery. You will tackle hybrid identity challenges and migrations, delivering measurable resilience for critical platforms. This is a high-impact opportunity to influence how organizations secure their digital identities and data. Compensation / Benefits * Lead Active Directory and identity infrastructure engagements across assessment, design, migration, implementation, stabilization, and post-implementation phases * Conduct comprehensive Active Directory assessments (domain/forest architecture, DNS, DHCP, replication, GPOs, trusts, service accounts, authentication protocols, admin processes) * Design and implement AD security hardening measures (tiering, RBAC, service accounts, GPO controls, identity threat detection, recovery) * Architect and support enterprise AD environments including hybrid identity with Entra ID, federation, synchronization, and dependencies * Lead or support domain/forest migrations, separations, consolidations (discovery, dependency analysis, cutover planning, validation, rollback, post-migration stabilization) Tasks * Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, or another technical field * 4+ years in technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience designing, securing, assessing, migrating, or operating Microsoft Active Directory environments * Experience with domain/forest architecture, DNS, DHCP, Sites and Services, LDAP, Group Policy, trusts, service accounts, replication, domain/forest recovery * Experience leading or supporting AD migrations, separations, or consolidations * Experience with migration tooling (Quest On Demand Migration or Semperis) * Experience with identity threat detection, cyber recovery, or related tooling (Semperis, Rubrik, Microsoft Defender for Identity) * Ability to travel up to 50% Key requirements *

_ AD security hardening measures (tiering, RBAC, service accounts, GPO controls, identity threat detection, recovery) * Architect and support enterprise AD environments including hybrid identity with Entra ID, federation, synchronization, and dependencies * Lead or support domain/forest migrations, separations, consolidations (discovery, dependency analysis, cutover planning, validation, rollback, post-migration stabilization) Tasks * Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, or another technical field * 4+ years in technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience designing, securing, assessing, migrating, or operating Microsoft Active Directory environments * Experience with domain/forest architecture, DNS, DHCP, Sites and Services, LDAP, Group Policy, trusts, service accounts, replication, domain/forest recovery * Experience leading or supporting AD aaaa trusts, separations, or consolidations * Experience with migration tooling (Quest On Demand Migration or Semperis) * Experience with identity threat detection, cyber recovery, or related tooling (Semperis, Rubrik, Microsoft Defender for Identity) * Ability to travel up to 50% Key requirements *