Overview In this role you drive Active Directory programs within Deloitte Cyber, collaborating with cross-functional teams to modernize and secure identity infrastructure. You'll shepherd assessments, design, migrations, and stabilizations, shaping hybrid identity and governance solutions. The work blends technical leadership with client-facing guidance, delivering resilient identity architectures. You join a mission-driven culture that values digital trust, security, and innovation.
Compensation / Benefits- discretionary annual incentive program
- accommodations for people with disabilities
- travel flexibility up to 50%
Responsibilities- Lead Active Directory and identity infrastructure engagements across assessment, design, migration, implementation, stabilization, and post-implementation phases
- Perform and oversee Active Directory assessments covering architecture, DNS/DHCP, replication, trusts, Group Policy, and admin processes
- Design and implement AD security and hardening improvements (tiering, RBAC, service accounts, GPO controls, identity threat detection)
- Architect and support enterprise AD environments, including hybrid identity with Entra ID, federation, and synchronization
- Lead or support domain/forest migrations, including discovery, dependency analysis, cutover planning, validation, rollback, and post-migration stabilization
Key requirements- Bachelor's degree in relevant technical field or equivalent work experience
- 4+ years in technical consulting, enterprise infrastructure, identity security, or AD engineering
- 4+ years hands-on in designing, securing, assessing, migrating, or operating Microsoft AD
- Experience with domain/forest architecture, DNS, DHCP, LDAP, Group Policy, trusts, service accounts, recovery
- Experience leading or supporting AD migrations, separations, or consolidations
- Experience with migration tooling (ODM or Semperis)
- Experience with identity threat detection, identity resilience, cyber recovery tooling (Semperis, Rubrik, Defender for Identity)
- Ability to travel up to 50%
- Limited immigration sponsorship may be available
- Independent and collaborative work style
- Strong written and verbal communication
- Meticulous attention to detail and quality
- Active Directory management and optimization
- Hybrid identity with Microsoft Entra ID, federation, synchronization
- Admistrative security controls (RBAC, ESAE/tiered administration)
