Active Directory & Azure AD Clean-up Consultant

Dynamic Interactive Business System Inc. (DIBSYS Inc.) is seeking a qualified Active Directory (AD) Clean-up Consultant to assess, clean up, modernize, and restructure Client’s Hybrid Active Directory (on-premises + Azure AD) environment, preparing the organization for a complete transition to 100% Azure AD (Entra ID)., · AD Assessment & Cleanup: Review forest structures, domain controllers, DNS/DHCP, and GPOs, and execute an approved cleanup plan to remove duplicate, stale, or inactive objects, improper group nesting, and unused OUs.

· Cloud Readiness & Intune Modernization: Migrate GPO-based configurations, workstation baselines, and device-control policies into Microsoft Intune, and implement Windows Autopilot for cloud-based provisioning.

· Security Posture & Zero Trust: Enforce Conditional Access policies, MFA, Privileged Identity Management (PIM), and Identity Protection configurations.

· Dependency Removal: Identify and plan the migration of legacy LDAP/Kerberos applications, file shares, and print servers to cloud-native equivalents.

· Documentation & SOPs: Deliver comprehensive, fully editable operational standard operating procedures (SOPs), architecture diagrams, runbooks, and a full Domain Controller Retirement Plan.

· Staff Training: Provide deep-dive technical walkthroughs, documentation reviews, and role-based mentoring for Infrastructure, Systems, Security, and Help Desk teams.

Pay: $45.00 - $60.00 per hour

Expected hours: 40.0 per week

Application Question(s):

• The candidate must Provide two (2) Client references comparable organizations where they have implemented or managed ActiveDirectory. References must be provided by candidates’ reporting managers only. References from co-workers will not be accepted

1. Required: Minimum of 5+ years of enterprise Active Directory and Azure AD experience.

2. Required: Experience with Microsoft identity security and modernizing legacy AD environments.

3. Preferred Certifications: Azure Administrator, Identity & Access Administrator, Security+.

4. Required Submission: Resumes for all proposed staff and candidate interviews prior to selection.

5. Mandatory: The candidate must Provide two (2) Client references comparable organizations where they have implemented or managed ActiveDirectory. References must be provided by candidates’ reporting managers only. References from co-workers will not be accepted., * Enterprise Active Directory and Azure AD: 5 years (Required) * MS identity security & modernizing legacy AD environments : 5 years (Required)

License/Certification:

• Azure Administrator (Preferred)