Active Directory Consultant

BenchIT seek to appoint an experienced Active Directory Consultant to design, implement, support, and optimize enterprise Microsoft identity and access management environments. The successful candidate will have deep expertise in Active Directory, Azure Active Directory (Microsoft Entra ID), Group Policy, identity governance, and hybrid cloud infrastructure. You will work closely with infrastructure, security, and cloud teams to deliver secure and scalable directory services solutions., * Design, deploy, and maintain enterprise Active Directory environments.

• Lead Active Directory migrations, consolidations, and upgrades.
• Implement and manage Microsoft Entra ID (Azure AD) and hybrid identity solutions.
• Configure and manage Azure AD Connect, Federation Services (ADFS), and Single Sign-On (SSO).
• Create, manage, and troubleshoot Group Policies (GPOs).
• Perform Active Directory health checks, security assessments, and remediation activities.
• Manage identity lifecycle processes, including provisioning, deprovisioning, and access governance.
• Support multi-domain and multi-forest Active Directory environments.
• Troubleshoot authentication issues involving Kerberos, NTLM, LDAP, DNS, and PKI infrastructure.
• Develop automation solutions using PowerShell.
• Implement Active Directory security best practices, including Privileged Access Management (PAM) and tiered administration.
• Work with cybersecurity teams to improve identity security and compliance posture.
• Produce technical documentation, designs, and operational procedures.
• Provide technical leadership during infrastructure and cloud transformation projects.

Key Technical Skills

Core A.D

• Active Directory Domain Services (AD DS)
• Active Directory Sites and Services
• Active Directory Federation Services (ADFS)
• Active Directory Certificate Services (ADCS)
• DNS and DHCP
• Group Policy Management

Microsoft Cloud Technologies

• Microsoft Entra ID (Azure AD)
• Azure AD Connect
• Microsoft 365 Administration
• Conditional Access Policies
• Identity Protection
• Privileged Identity Management (PIM)

Authentication & Security

• Kerberos
• LDAP/LDAPS
• NTLM
• Multi-Factor Authentication (MFA)
• Single Sign-On (SSO)
• Zero Trust Architecture
• Privileged Access Management

• 5+ years supporting enterprise Active Directory environments.
• Experience delivering Active Directory migration or transformation projects.
• Strong troubleshooting experience across authentication and identity platforms.
• Experience managing hybrid Microsoft environments.
• Experience with Microsoft 365 and Azure identity services.
• Proven ability to work within large-scale enterprise environments (5,000+ users preferred).

Desirable:

• Active Directory forest/domain consolidation projects.
• Azure cloud migrations.
• Identity governance and administration (IGA) solutions.
• CyberArk, BeyondTrust, SailPoint, Okta, or Ping Identity.
• Windows Server 2016/2019/2022 administration.
• VMware or Hyper-V environments.

Active Directory (AD) Technical Consultant