Identity & AD Optimization Engineer (Contract, Hybrid)

JSM Consulting Inc.; New York (NY); Hybrid; USD 96,000 - 165,000; Full time

Job summary

JSM Consulting Inc. seeks a hands-on Contract Engineer with deep AD/identity expertise to assess, optimize, and support a complex hybrid environment (AD/DNS/DHCP, Azure AD Entra ID). This 90-day engagement may extend, with on-site work preferred and hybrid options available.

The role blends delivery and advisory duties, requiring strong documentation and cross-team communication, to drive a practical roadmap for identity governance, MFA, and privileged access in a large enterprise.

Qualifications

• Strong Active Directory expertise with multi-domain/forest design.
• Experience with Azure AD/Entra ID and hybrid identity solutions.
• Deep DNS/DHCP knowledge in enterprise environments.
• Windows Server administration fundamentals and good documentation skills.

Responsibilities

• Assess AD environment (domain/forest design, OUs, GPOs, replication, DNS, FSMO).
• Remediate stale accounts, orphaned objects, and security group sprawl.
• Optimize Azure AD Entra ID and hybrid identity (Azure AD Connect / Cloud Sync, MFA).
• Evaluate identity lifecycle management (provisioning, offboarding, privileged access).
• Develop a prioritized identity and AD improvement roadmap.
• Provide SME support and escalation for AD/identity issues.
• Create/maintain operational runbooks and documentation.

Skills

Active Directory expertise

Azure AD / Entra ID

Hybrid identity

DNS/DHCP

Windows Server administration

Documentation & comms

Scripting (PowerShell)

Tools

PowerShell

Azure AD Connect

Defender for Identity

Job description

JSM Consulting Inc. seeks a hands-on Contract Engineer with deep AD/identity expertise to assess, optimize, and support a complex hybrid environment (AD/DNS/DHCP, Azure AD Entra ID). This 90-day engagement may extend, with on-site work preferred and hybrid options available.

The role blends delivery and advisory duties, requiring strong documentation and cross-team communication, to drive a practical roadmap for identity governance, MFA, and privileged access in a large enterprise.