Microsoft Security Active Directory Senior Consultant

Experteer Overview In this role within Deloitte Cyber, you drive Active Directory initiatives to strengthen identity, access, and platform security for clients. You’ll lead AD engagements across assessments, design, migration, and stabilization, shaping secure, scalable identity environments. You work with cross-functional teams to deliver secure solutions and enterprise migrations, contributing to clients’ cyber resilience. This is a chance to influence identity security at scale and to advance Deloitte’s mission of trusted digital experiences. Compensation / Benefits * Lead Active Directory engagements across assessment, design, migration, implementation, stabilization, and post-implementation phases * Oversee AD assessments covering architecture, DNS, DHCP, replication, Group Policy, trusts, service accounts, authentication, and admin processes * Design and implement AD security hardening, RBAC, GPO controls, and identity threat detection/recovery * Architect and support enterprise AD environments, including hybrid identity with Entra ID, federation, synchronization, and dependencies * Lead or support domain/forest migrations, separations, consolidations, including discovery, planning, validation, rollback, and post-migration stabilization Tasks * Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, or another technical field * 4+ years of technical consulting or enterprise infrastructure experience * 4+ years of hands-on experience with designing, securing, assessing, migrating, or operating Microsoft Active Directory environments * Experience with AD services: domain/forest architecture, DNS, DHCP, Sites and Services, Group Policy, trusts, LDAP, and recovery * Experience leading or supporting AD migrations, separations, or consolidations * Experience with migration tooling (e.g., Quest On Demand Migration or Semperis) * Experience with identity threat detection or cyber recovery tooling (e.g., Semperis, Rubrik, Microsoft Defender for Identity) * Willingness to travel up to 50% * Limited immigration sponsorship may be available Key requirements *

AD environments, including hybrid identity with Entra ID, federation, synchronization, and dependencies * Lead or support domain/forest migrations, separations, consolidations, including discovery, planning, validation, rollback, and post-migration stabilization Tasks * Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, or another technical field * 4+ years of technical consulting or enterprise infrastructure experience * 4+ years of hands-on experience with designing, securing, assessing, migrating, or operating Microsoft Active Directory environments * Experience with AD services: domain/forest architecture, DNS, DHCP, Sites and Services, Group Policy, trusts, LDAP, and recovery * Experience leading or supporting AD migrations, separations, or consolidations * Experience with migration tooling (e.g., Quest On Demand Migration or Semperis) * Experience with identity threat detection or cyber recovery tooling (e.g., Semperis, aaaa 50% Microsoft Defender for Identity) * Willingness to travel up to 50% * Limited immigration sponsorship may be available Key requirements *