Microsoft Security Active Directory Senior Consultant

Experteer Overview In this role, you will lead and shape Active Directory and identity infrastructure engagements, driving secure, scalable identity environments for clients. You’ll work across assessment, design, migration, and implementation phases within Deloitte Cyber, collaborating with cross-functional teams to strengthen resilience and reduce cyber risk. You will tackle complex AD architectures, hybrid identity integrations, and migration projects, delivering measurable improvements in security and operational efficiency. This opportunity offers meaningful impact through enterprise-scale identity modernization and risk-aware security practices. Compensation / Benefits * Lead Active Directory and identity infrastructure engagements across assessment, design, migration, implementation, stabilization, and post-implementation * Perform and oversee AD assessments covering domain/forest architecture, DNS, DHCP, replication, GPOs, trusts, service accounts, and authentication * Design and implement AD security hardening, including tiering, RBAC, service account management, GPO controls, and identity threat recovery * Architect and support enterprise AD environments, including hybrid identity with Microsoft Entra ID, federation, synchronization, and dependencies * Lead or support domain/forest migrations, including discovery, dependency analysis, cutover planning, validation, rollback, and post-migration stabilization Tasks * Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, or another technical field * 4+ years of experience in technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience designing, securing, assessing, migrating, or operating Microsoft AD environments * Experience with AD services including domain/forest architecture, DNS, DHCP, Group Policy, LDAP, trusts, and recovery * Experience leading or supporting AD migrations, separations, or consolidations * Experience with migration tooling such as Quest On Demand Migration or Semperis migration capabilities * Experience with identity threat detection or identity resilience tooling (e.g., Semperis, Rubrik, or Microsoft Defender for Identity) * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements *

implement AD security hardening, including tiering, RBAC, service account management, GPO controls, and identity threat recovery * Architect and support enterprise AD environments, including hybrid identity with Microsoft Entra ID, federation, synchronization, and dependencies * Lead or support domain/forest migrations, including discovery, dependency analysis, cutover planning, validation, rollback, and post-migration stabilization Tasks * Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, or another technical field * 4+ years of experience in technical consulting, enterprise infrastructure, identity security, or AD engineering * 4+ years hands-on experience designing, securing, assessing, migrating, or operating Microsoft AD environments * Experience with AD services including domain/forest architecture, DNS, DHCP, Group Policy, LDAP, trusts, and recovery * Experience leading or supporting AD migrations, separations, or aaaaaaaa across * Experience with migration tooling such as Quest On Demand Migration or Semperis migration capabilities * Experience with identity threat detection or identity resilience tooling (e.g., Semperis, Rubrik, or Microsoft Defender for Identity) * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements *