Active Directory Consultant

The Active Directory & Entra ID Consultant leads the assessment, design, and migration planning of complex identity environments, with a primary focus on consolidating large, siloed Active Directory domains into a secure, standardized target architecture. This role conducts detailed current-state assessments across forests, domains, trusts, GPOs, schema, and core identity services (DNS, DHCP, PKI), and designs a future-state AD and Entra ID architecture aligned to public-sector and higher-education requirements. The consultant defines tiered AD designs, identity lifecycle models, and migration strategies, including tool evaluation (e.g., Quest, BitTitan), phased execution approaches, and risk mitigation plans. They design hybrid identity using Entra Connect, documenting sync scopes, attribute flows, and connector placement to preserve cloud identities during migrations. Acting as a client-facing advisor, the consultant leads requirements-gathering sessions, communicates architectural decisions and tradeoffs, and produces high-quality technical documentation, runbooks, and diagrams that translate business and regulatory needs into actionable designs for engineering teams to execute.

Advanced expertise in Active Directory

AD architecture, forests/domains, trusts, schema, and GPO

Proven experience leading Active Directory consolidation and migration assessments

Strong knowledge of AD identity lifecycle and access models

Hands-on design experience with Microsoft Entra ID / Entra Connect

Solid understanding of DNS, DHCP, and PKI (Certificates) as they relate to identity

Experience producing formal technical documentation and runbooks

Strong client-facing communication and consulting skills

Ability to translate complex technical designs into clear, written deliverables SQL Database Administration (identity or logging platforms)

Power BI for identity, security, or migration reporting