Microsoft Security Active Directory Senior Consultant

Experteer Overview As part of the Deloitte Cyber team, you help clients strengthen identity, access, and platform security. You lead AD and identity infrastructure engagements, guiding assessments, design, migrations, and hardening to enable secure hybrid identities. You collaborate across teams to deliver resilient identity environments and support enterprise-scale identity strategies. You will shape security outcomes for diverse clients while working in a dynamic, fast-paced consulting environment. Compensation / Benefits * Lead Active Directory and identity infrastructure engagements across end-to-end lifecycle * Perform and oversee AD assessments covering architecture, DNS/DHCP, replication, GPOs, trusts, and authentication processes * Design and implement AD security hardening, including tiering, RBAC, service accounts, and identity threat recovery * Architect and support enterprise AD environments, including hybrid identity with Entra ID, federation, and synchronization * Lead or support domain/forest migrations, including discovery, planning, validation, rollback, and post-migration stabilization Tasks * Bachelor’s degree in a technical field * 4+ years in technical consulting, enterprise infrastructure, identity security, or AD engineering * Hands-on experience designing, securing, migrating, or operating Microsoft AD environments * Experience with AD services: domain/forest architecture, DNS/DHCP, Sites and Services, Group Policy, trusts, LDAP, recovery * Experience with AD migrations, separations, or consolidations * Experience with migration tools: Quest On Demand Migration or Semperis * Experience with identity threat detection, cyber recovery, or related tooling (Semperis, Rubrik, Microsoft Defender for Identity) * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements *

_ support domain/forest migrations, including discovery, planning, validation, rollback, and post-migration stabilization Tasks * Bachelor’s degree in a technical field * 4+ years in technical consulting, enterprise infrastructure, identity security, or AD engineering * Hands-on experience designing, securing, migrating, or operating Microsoft AD environments * Experience with AD services: domain/forest architecture, DNS/DHCP, Sites and Services, Group Policy, trusts, LDAP, recovery * Experience with AD migrations, separations, or consolidations * Experience with migration tools: Quest On Demand Migration or Semperis * Experience with identity threat detection, cyber recovery, or related tooling (Semperis, Rubrik, Microsoft Defender for Identity) * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements *