Infobox Engineer

JSM Consulting Inc.; New York (NY); Hybrid; USD 96,000 - 165,000; Full time

Job summary

JSM Consulting Inc. seeks a hands-on Contract Engineer with deep AD/identity expertise to assess, optimize, and support a complex hybrid environment (AD/DNS/DHCP, Azure AD Entra ID). This 90-day engagement may extend, with on-site work preferred and hybrid options available.

The role blends delivery and advisory duties, requiring strong documentation and cross-team communication, to drive a practical roadmap for identity governance, MFA, and privileged access in a large enterprise.

Qualifications

• Strong Active Directory expertise with multi-domain/forest design.
• Experience with Azure AD/Entra ID and hybrid identity solutions.
• Deep DNS/DHCP knowledge in enterprise environments.
• Windows Server administration fundamentals and good documentation skills.

Responsibilities

• Assess AD environment (domain/forest design, OUs, GPOs, replication, DNS, FSMO).
• Remediate stale accounts, orphaned objects, and security group sprawl.
• Optimize Azure AD Entra ID and hybrid identity (Azure AD Connect / Cloud Sync, MFA).
• Evaluate identity lifecycle management (provisioning, offboarding, privileged access).
• Develop a prioritized identity and AD improvement roadmap.
• Provide SME support and escalation for AD/identity issues.
• Create/maintain operational runbooks and documentation.

Skills

Active Directory expertise

Azure AD / Entra ID

Hybrid identity

DNS/DHCP

Windows Server administration

Documentation & comms

Scripting (PowerShell)

Tools

PowerShell

Azure AD Connect

Defender for Identity

Job description

• Assess AD environment (domain/forest design, OUs, GPOs, replication, DNS, FSMO roles).
• Automation/scripting (PowerShell, etc.).

Contract Engineer - Active Directory / Identity Management

Engagement Overview

Contract role (initial 90 days with potential extension) focused on Active Directory, DNS/DHCP, and Identity Management (AD / Azure AD / Entra ID). On-site preferred; hybrid considered.

Role Summary

Seeking a hands-on engineer with strong Active Directory and identity expertise to assess, optimize, and support a complex AD and hybrid identity environment. This is both a delivery and advisory role with long-term potential.

Key Responsibilities

Active Directory & Identity (Primary Focus)

• Assess AD environment (domain/forest design, OUs, GPOs, replication, DNS, FSMO roles).
• Remediate stale accounts, orphaned objects, and security group sprawl.
• Optimize Azure AD (Entra ID), including hybrid identity (Azure AD Connect / Cloud Sync), MFA, and conditional access.
• Evaluate and improve identity lifecycle management (provisioning, offboarding, privileged access, service accounts).
• Develop a prioritized identity and AD improvement roadmap.
• Provide ongoing SME support and escalation for AD/identity issues.
• Create and maintain operational documentation, standards, and runbooks.

Required Skills

• Strong Active Directory expertise (multi-domain/forest, GPOs, replication, DNS/DHCP).
• Azure AD / Entra ID and hybrid identity experience.
• Deep DNS/DHCP knowledge in enterprise environments.
• Windows Server administration fundamentals.
• Strong documentation and cross-team communication skills.

Preferred

• Microsoft Identity certifications.
• Experience with identity governance and access management.
• Familiarity with tools like Microsoft Defender for Identity.
• Automation/scripting (PowerShell, etc.).
• Consulting or professional services experience.

Key Deliverables (Highlights)

• AD current-state assessment and health report (Weeks 1-3).
• Azure AD / Entra ID review and recommendations (Weeks 2-4).
• Identity roadmap and action plan (Week 4).
• Ongoing AD remediation, optimization, and operational support.
• Documentation, standards, and runbooks.