> Markdown version of [/jobs/ext/4408499-active-directory-azure-ad-clean-up-consultant](https://www.wearedevelopers.com/jobs/ext/4408499-active-directory-azure-ad-clean-up-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Active Directory & Azure AD Clean-up Consultant

- **Company:** Dynamic Inc
- **Location:** Chicago, IL, United States
- **Experience:** Expert
- **Salary:** $93,600.0 - $124,800.0
- **Contract:** Temporary contract
- **Skills:** Microsoft Windows, Active Directory, Domain Controllers, Microsoft Azure, Business Systems, Cloud Computing, Cloud Engineering, Dynamic Host Configuration Protocol, Domain Name System (DNS), Identity and Access Management, Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), Print Servers, Azure Active Directory, Zero Trust Network Access, Runbook, Microsoft InTune, Deployment Automation
- **Published:** October 26, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=8d29263640b2ae29

## About the Role

1. Required: Minimum of 5+ years of enterprise Active Directory and Azure AD experience.

 2. Required: Experience with Microsoft identity security and modernizing legacy AD environments.

 3. Preferred Certifications: Azure Administrator, Identity & Access Administrator, Security+.

 4. Required Submission: Resumes for all proposed staff and candidate interviews prior to selection.

 5. Mandatory: The candidate must Provide two (2) Client references comparable organizations where they have implemented or managed ActiveDirectory. References must be provided by candidates' reporting managers only. References from co-workers will not be accepted., * Enterprise Active Directory and Azure AD: 5 years (Required)
 * MS identity security & modernizing legacy AD environments : 5 years (Required)

License/Certification:

 * Azure Administrator (Preferred)

## Description

Dynamic Interactive Business System Inc. (DIBSYS Inc.) is seeking a qualified Active Directory (AD) Clean-up Consultant to assess, clean up, modernize, and restructure Client's Hybrid Active Directory (on-premises + Azure AD) environment, preparing the organization for a complete transition to 100% Azure AD (Entra ID)., · AD Assessment & Cleanup: Review forest structures, domain controllers, DNS/DHCP, and GPOs, and execute an approved cleanup plan to remove duplicate, stale, or inactive objects, improper group nesting, and unused OUs.

· Cloud Readiness & Intune Modernization: Migrate GPO-based configurations, workstation baselines, and device-control policies into Microsoft Intune, and implement Windows Autopilot for cloud-based provisioning.

· Security Posture & Zero Trust: Enforce Conditional Access policies, MFA, Privileged Identity Management (PIM), and Identity Protection configurations.

· Dependency Removal: Identify and plan the migration of legacy LDAP/Kerberos applications, file shares, and print servers to cloud-native equivalents.

· Documentation & SOPs: Deliver comprehensive, fully editable operational standard operating procedures (SOPs), architecture diagrams, runbooks, and a full Domain Controller Retirement Plan.

· Staff Training: Provide deep-dive technical walkthroughs, documentation reviews, and role-based mentoring for Infrastructure, Systems, Security, and Help Desk teams.

Pay: $45.00 - $60.00 per hour

Expected hours: 40.0 per week

Application Question(s):

 * The candidate must Provide two (2) Client references comparable organizations where they have implemented or managed ActiveDirectory. References must be provided by candidates' reporting managers only. References from co-workers will not be accepted