Overview In this role you drive Active Directory programs within Deloitte Cyber, collaborating with cross-functional teams to modernize and secure identity infrastructure. You'll shepherd assessments, design, migrations, and stabilizations, shaping hybrid identity and governance solutions. The work blends technical leadership with client-facing guidance, delivering resilient identity architectures. You join a mission-driven culture that values digital trust, security, and innovation. Compensation / Benefitsdiscretionary annual incentive programaccommodations for people with disabilitiestravel flexibility up to 50% ResponsibilitiesLead Active Directory and identity infrastructure engagements across assessment, design, migration, implementation, stabilization, and post-implementation phasesPerform and oversee Active Directory assessments covering architecture, DNS/DHCP, replication, trusts, Group Policy, and admin processesDesign and implement AD security and hardening improvements (tiering, RBAC, service accounts, GPO controls, identity threat detection)Architect and support enterprise AD environments, including hybrid identity with Entra ID, federation, and synchronizationLead or support domain/forest migrations, including discovery, dependency analysis, cutover planning, validation, rollback, and post-migration stabilization Key requirementsBachelor's degree in relevant technical field or equivalent work experience4+ years in technical consulting, enterprise infrastructure, identity security, or AD engineering4+ years hands-on in designing, securing, assessing, migrating, or operating Microsoft ADExperience with domain/forest architecture, DNS, DHCP, LDAP, Group Policy, trusts, service accounts, recoveryExperience leading or supporting AD migrations, separations, or consolidationsExperience with migration tooling (ODM or Semperis)Experience with identity threat detection, identity resilience, cyber recovery tooling (Semperis, Rubrik, Defender for Identity)Ability to travel up to 50%Limited immigration sponsorship may be availableIndependent and collaborative work styleStrong written and verbal communicationMeticulous attention to detail and qualityActive Directory management and optimizationHybrid identity with Microsoft Entra ID, federation, synchronizationAdmistrative security controls (RBAC, ESAE/tiered administration)
Not specified in the original listing.
Not specified in the original listing.
