Microsoft Identity Entra ID Manager

As an Engineering Manager II on the Deloitte Cyber team, you will be responsible for:

• Assessing Microsoft Entra ID and Active Directory environments and developing recommendations to improve security, configuration, and operational health
• Leading the architecture, design, and implementation of Active Directory and Microsoft Entra ID deployments, migrations, upgrades, and consolidation efforts
• Supporting identity modernization activities, including single sign-on, multifactor authentication, conditional access, identity provider migrations, and application integrations
• Performing health checks, security assessments, recovery planning, and remediation activities across Active Directory services, domain environments, and supporting infrastructure
• Delivering client-facing identity engagements across assessment, design, implementation, and post-implementation phases, while contributing technical insight to Deloitte eminence efforts

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to lead projects or workstreams
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to mentor and provide clear guidance to others, Required:
• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, or Information Technology
• 6+ years of experience in technical consulting, solution architecture, or client delivery involving Microsoft identity and access management solutions
• 6+ years of hands-on experience with Microsoft Entra ID, including conditional access, single sign-on, multifactor authentication, Privileged Identity Management, and application integrations
• 6+ years of hands-on experience with Active Directory, including Active Directory Federation Services, group policy, domain cleanup, domain and forest recovery, trusts, and federation
• 5+ years of experience with identity protocols, including WS-Federation, Security Assertion Markup Language, OpenID Connect, and OAuth
• Ability to travel 25-50%, on average, based on the work you do and the clients and industries/sectors you serve.
• Limited immigration sponsorship may be available.

Preferred:

• Experience leading enterprise Active Directory or Microsoft Entra ID migration, upgrade, or consolidation programs
• Experience implementing security solutions for Microsoft identity platforms, including Microsoft Defender for Identity
• Experience supporting mergers, acquisitions, or divestitures involving Active Directory domains and forests
• Experience with Microsoft Entra B2B, Microsoft Entra B2C, or identity provider migration activities
• Experience producing technical assessments, remediation plans, or compliance reporting for identity platforms
• One or more certifications such as Microsoft SC-300, Certified Cloud Security Professional, Certificate of Cloud Security Knowledge, Certified Information Systems Security Professional, Cisco Certified Network Professional, Cisco Certified Network Associate, Microsoft Certified Solutions Expert, or Microsoft Certified Solutions Associate

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.