Overview You will lead AD and identity infrastructure engagements, shaping secure, hybrid identity environments. In this role you collaborate with cross-functional teams to assess, design, migrate, and stabilize Active Directory at scale, delivering security hardening and governance improvements. You help clients modernize identity platforms and manage cyber risk, contributing to secure digital trust. This is a high-impact role on the Deloitte Cyber team, working on transformative identity projects for diverse clients.
Compensation / Benefits- discretionary annual incentive program
- professional development opportunities
- inclusive culture
- accommodations for people with disabilities
Responsibilities- Lead Active Directory and identity infrastructure engagements across all project phases
- Conduct comprehensive AD assessments: domain/forest architecture, DNS, DHCP, replication, GPOs, trusts, service accounts, authentication
- Design and implement AD security hardening: administrative tiering, RBAC, service accounts, policy controls
- Architect and support hybrid identity environments with Entra ID and federation
- Lead or support domain/forest migrations, including discovery, planning, execution, validation, rollback, and stabilization
Key requirements- Bachelor's degree in a technical field
- 4+ years in technical consulting, enterprise infrastructure, identity security, or AD engineering
- Hands-on experience designing, securing, migrating, or operating Microsoft AD
- Experience with AD services: domain/forest architecture, DNS/DHCP, Sites and Services, Group Policy, trusts, LDAP, recovery
- Experience leading or supporting AD migrations or consolidations
- Experience with migration tools such as Quest ODM or Semperis
- Experience with identity threat detection, recovery tooling (e.g., Semperis, Rubrik, Microsoft Defender for Identity)
- Ability to travel up to 50%
- Strong written and verbal communication
- Independence and teamwork
- Attention to detail and quality
- Active Directory design, security, and administration
- Domain and forest migrations, separations, consolidations
- Hybrid identity with Microsoft Entra ID
