Microsoft Identity Entra ID Senior Consultant

Deloitte France; Mechanicsburg (Cumberland County); On-site; USD 105,000 - 208,000; Full time

Job summary

Deloitte Cyber is recruiting for a Senior Engineering Management Specialist to drive identity security projects and Microsoft Entra ID/Active Directory deployments. You will architect, implement, and optimize configurations, migrations, and domain strategies while guiding teams and client engagements.

Expect to work across security operations, threat protection, and post-implementation reviews, with opportunities to lead and influence governance, deployment best practices, and client outcomes.

Qualifications

• 4+ years of technical consulting and solution architecture for Microsoft identity platforms (AD & Entra ID).
• 4+ years implementing and operating Entra ID including CA, SSO, MFA, PIM/PAM, and app integrations.
• 4+ years implementing and operating Active Directory, with AD FS, GPOs, domain/forest recovery.
• Ability to travel 25-50% on average based on client work.
• Limited immigration sponsorship may be available.

Responsibilities

• Assess Entra ID and AD environments, including migration and governance.
• Architect and implement AD/Entra ID deployments, migrations, upgrades, and domain consolidations.
• Conduct health checks, discovery, cleanup, and security assessments of AD services.
• Support integrations across Entra ID, AD, LDAP, Azure B2B/C, OAuth, and OpenID Connect.
• Advise on security operations, reporting, threat protection, and post-implementation reviews.

Skills

Independent work

Team collaboration

Communication skills

Attention to detail

Relationship building

Project leadership

multitasking

Interpersonal skills

Deadline driven

Clear guidance

Education

Bachelor's degree in Computer Science or related

Master of Computer Applications

Job description

Our Deloitte Cyber team helps organizations address evolving cybersecurity challenges across identity, access, and platform security. Join our team to deliver solutions that help clients strengthen resilience, modernize identity environments, and manage cyber risk with confidence.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As a Senior Engineering Management Specialist on the Deloitte Cyber team, you will be responsible for:

• Assessing Microsoft Entra ID and Active Directory environments, including tenant configuration, hardening, identity governance and administration, multifactor authentication, single sign-on, conditional access, and identity provider migrations
• Architecting, designing, and implementing Active Directory and Microsoft Entra ID deployments, migrations, upgrades, domain consolidations, and domain migration activities
• Performing health checks, discovery, cleanup, and security assessments across Active Directory services, including Domain Name System, Dynamic Host Configuration Protocol, Group Policy, privileged groups, service accounts, and disaster recovery readiness
• Supporting application and directory integrations across Microsoft Entra ID, Active Directory, Lightweight Directory Access Protocol environments, Azure B2B, Azure B2C, Security Assertion Markup Language, OAuth, and OpenID Connect
• Advising clients on security operations, reporting, threat protection, troubleshooting, and post-implementation reviews for Microsoft identity platforms, including Microsoft Defender for Identity

A successful candidate would possess these skills:

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to lead projects or workstreams
• Ability to manage and prioritize multiple tasks in a fast‑paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to provide clear guidance to others

The team

Deloitte Cyber helps clients build trust in digital environments by strengthening identity, access, and security capabilities across critical platforms. The team supports organizations in protecting users, securing access to data, and improving confidence in digital interactions.

Qualifications

Required:

• 4+ years of experience in technical consulting, client problem solving, and solution architecture for Microsoft identity platforms, including Active Directory and Microsoft Entra ID
• 4+ years of experience implementing and operating Microsoft Entra ID, including conditional access, single sign‑on, multifactor authentication, Privileged Access Management, Privileged Identity Management, and application integrations
• 4+ years of experience implementing and operating Active Directory, including Active Directory Federation Services, domain cleanup, domain and forest recovery, Group Policy Objects, group Managed Service Accounts, security groups, trusts, and federation
• Bachelor's degree in Computer Science, Cyber Security, Information Security, Engineering, Information Technology, or Master of Computer Applications
• Ability to travel 25-50%, on average, based on the work you do and the clients and industries/sectors you serve.
• Limited immigration sponsorship may be available.

Preferred:

• 3+ years of experience with identity and access management protocols, including WS-Federation, Security Assertion Markup Language, OpenID Connect, and OAuth
• 3+ years of experience implementing identity and access management security solutions for Microsoft Active Directory
• One or more certifications such as Microsoft SC-300, Certified Cloud Security Professional, Certificate of Cloud Security Knowledge, Certified Information Systems Security Professional, Cisco Certified Network Professional, Cisco Certified Network Associate, Microsoft Certified Solutions Expert, or Microsoft Certified Solutions Associate
• The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $105,400 to $207,800.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.