Quest Migration Pro SME

Nowges; Fort Meade (MD); On-site; USD 85,000 - 100,000; Full time

Job summary

Nowges is seeking a Quest Migration Pro SME to lead enterprise Active Directory migrations for the Defense Enclave Services program at DISA and DoD Fourth Estate agencies. The role focuses on AD migrations, SID History, one-way trusts, and secure data transfers across forests, with close collaboration across Identity, Endpoint, Security, and Program Management teams.

You will design migration strategies, develop runbooks, and implement migration tooling using QMM and Quest Migrator Pro, ensuring

Qualifications

• Bachelor's degree with 7-10 years of relevant experience, or Master's degree with 5–8 years of experience (additional experience may be considered in lieu of degree)
• Minimum 7 years of experience supporting enterprise Microsoft Active Directory environments
• Minimum 3 years of hands-on experience utilizing Quest Migration Manager (QMM), Quest Migrator Pro, or equivalent enterprise Active Directory migration solutions
• Experience designing and supporting Active Directory forest migrations, consolidations, or restructures
• Strong understanding of Active Directory architecture including forests, domains, trusts, sites, replication, DNS, FSMO roles, Group Policy, and authentication
• Experience implementing and supporting SID History migration and resource access preservation
• Experience migrating Windows workstation profiles while maintaining user data and application functionality
• Strong PowerShell scripting skills supporting migration automation and reporting
• Experience troubleshooting Active Directory authentication, Kerberos, LDAP, DNS, and trust-related issues
• Experience supporting Windows 10/11 enterprise environments
• Experience working directly with customers and stakeholders to gather requirements, provide migration status, and resolve technical issues
• Strong communication, organizational, analytical, and problem-solving skills with the ability to support large enterprise migration activities
• Experience using Atlassian tools including Jira and Confluence
• Current DoD 8570 IAT Level II certification (Security+ CE, CISSP, or equivalent)

Responsibilities

• Lead the planning, design, and execution of enterprise Active Directory migrations utilizing Quest Migration Manager (QMM) / Quest Migrator Pro
• Design and implement migration strategies for users, groups, computers, service accounts, and security principals between Active Directory forests
• Develop migration runbooks, wave plans, rollback procedures, and technical documentation supporting enterprise migration operations
• Configure and administer Quest Migration Manager components including Directory Synchronization, Resource Updating Manager, Migration Manager for Active Directory, and associated migration agents
• Design, configure, and troubleshoot one-way Active Directory trusts required to support migration operations
• Implement and validate SID History migration while ensuring compliance with DoD security requirements and migration objectives
• Perform workstation profile migrations utilizing Quest tools while maintaining user settings, permissions, and application functionality
• Coordinate with Endpoint Engineering teams supporting MECM, Intune, Autopilot, Group Policy, and Windows deployment solutions to ensure successful workstation migrations
• Collaborate with Identity Management teams to synchronize Active Directory objects, resolve identity conflicts, and maintain directory integrity throughout migration activities
• Support migration of file share access, application permissions, and other security resources requiring SID History or resource updating
• Troubleshoot complex migration failures involving Active Directory replication, Kerberos authentication, DNS, trusts, GPO processing, and Windows security
• Develop PowerShell automation to support migration validation, reporting, provisioning, cleanup, and operational efficiencies
• Support security assessments and implementation of STIG-compliant migration solutions while identifying and mitigating operational risks
• Provide technical leadership during migration events, cutovers, and post-migration stabilization activities

Skills

Active Directory migrations

Quest Migration Manager (QMM)

Quest Migrator Pro

PowerShell scripting

Strong communication

Troubleshooting

Security compliance

Team collaboration

Education

Bachelor's degree

Master's degree

Tools

Quest Migration Manager (QMM)

Quest Migrator Pro

MECM

Intune

Group Policy

Jira

Confluence

PowerShell

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time DISA Headquarters - DC, Fort Meade, MD, US

5 days ago Requisition ID: 1400

Salary Range: $85,000.00 To $100,000.00 Annually

GES is seeking a highly skilledQuest Migration Pro Subject Matter Expert (SME)to support theDefense Enclave Services (DES)program—an enterprise-scale digital modernization initiative for the Defense Information Systems Agency (DISA) and Department of Defense (DoD) Fourth Estate Agencies.

This role will serve as the technical authority for enterprise Active Directory migration activities utilizingQuest Migration Manager (QMM) / Quest Migrator Pro. The successful candidate will lead planning, design, implementation, troubleshooting, and optimization of large-scale domain consolidation and user migration efforts while ensuring secure migration of user identities, workstations, profiles, and applications with minimal operational impact.

The Quest Migration Pro SME will partner closely with Active Directory, Identity Management, Endpoint Engineering, Security, and Program Management teams to develop migration strategies supporting thousands of users across multiple DoD organizations. This position requires deep technical expertise in Active Directory migrations, SID History, inter-forest trusts, Windows endpoint migrations, and Quest migration tooling, as well as strong communication skills to collaborate with government stakeholders and mission partners.

• Lead the planning, design, and execution of enterprise Active Directory migrations utilizing Quest Migration Manager (QMM) / Quest Migrator Pro
• Design and implement migration strategies for users, groups, computers, service accounts, and security principals between Active Directory forests
• Develop migration runbooks, wave plans, rollback procedures, and technical documentation supporting enterprise migration operations
• Configure and administer Quest Migration Manager components including Directory Synchronization, Resource Updating Manager, Migration Manager for Active Directory, and associated migration agents
• Design, configure, and troubleshoot one-way Active Directory trusts required to support migration operations
• Implement and validate SID History migration while ensuring compliance with DoD security requirements and migration objectives
• Perform workstation profile migrations utilizing Quest tools while maintaining user settings, permissions, and application functionality
• Coordinate with Endpoint Engineering teams supporting MECM, Intune, Autopilot, Group Policy, and Windows deployment solutions to ensure successful workstation migrations
• Collaborate with Identity Management teams to synchronize Active Directory objects, resolve identity conflicts, and maintain directory integrity throughout migration activities
• Support migration of file share access, application permissions, and other security resources requiring SID History or resource updating
• Troubleshoot complex migration failures involving Active Directory replication, Kerberos authentication, DNS, trusts, GPO processing, and Windows security
• Develop PowerShell automation to support migration validation, reporting, provisioning, cleanup, and operational efficiencies
• Support security assessments and implementation of STIG-compliant migration solutions while identifying and mitigating operational risks
• Provide technical leadership during migration events, cutovers, and post-migration stabilization activities,

Required Qualifications:

• Bachelor's degree with 7-10 years of relevant experience, or Master's degree with 5–8 years of experience (additional experience may be considered in lieu of degree)
• Minimum 7 years of experience supporting enterprise Microsoft Active Directory environments
• Minimum 3 years of hands-on experience utilizing Quest Migration Manager (QMM), Quest Migrator Pro, or equivalent enterprise Active Directory migration solutions
• Experience designing and supporting Active Directory forest migrations, consolidations, or restructures
• Strong understanding of Active Directory architecture including forests, domains, trusts, sites, replication, DNS, FSMO roles, Group Policy, and authentication
• Experience implementing and supporting SID History migration and resource access preservation
• Experience migrating Windows workstation profiles while maintaining user data and application functionality
• Strong PowerShell scripting skills supporting migration automation and reporting
• Experience troubleshooting Active Directory authentication, Kerberos, LDAP, DNS, and trust-related issues
• Experience supporting Windows 10/11 enterprise environments
• Experience working directly with customers and stakeholders to gather requirements, provide migration status, and resolve technical issues
• Strong communication, organizational, analytical, and problem-solving skills with the ability to support large enterprise migration activities
• Experience using Atlassian tools including Jira and Confluence
• Current DoD 8570 IAT Level II certification (Security+ CE, CISSP, or equivalent)

Desired Qualifications:

• Experience supporting migrations exceeding 10,000 users or devices
• Experience supporting Defense Enclave Services (DES), DISA, or other large DoD enterprise environments
• Experience integrating Quest Migration Manager with MECM, Microsoft Intune, Azure AD, or Microsoft Entra ID
• Experience with Microsoft Identity Manager (MIM), Active Directory Federation Services (AD FS), or Microsoft Entra Connect
• Knowledge of Zero Trust architecture and identity modernization initiatives
• Experience supporting enterprise file server migrations and security translation
• Experience with Windows Autopilot, Microsoft Intune, and modern endpoint management
• Microsoft certifications such as Microsoft Certified: Identity and Access Administrator Associate or Windows Server Hybrid Administrator Associate
• Quest-certified training or professional experience administering Quest Migration Manager

Please ask the following questions during the screening process and submit the responses along with the candidate's resume:

• Describe your experience with Quest Migration Manager or Quest Migrator Pro. Which components have you personally configured or administered?
• Have you designed or supported Active Directory migrations between separate forests? Approximately how many users and devices were migrated?
• Explain how SID History works and why it is important during an Active Directory migration.
• What are the security considerations and risks associated with enabling SID History migration?
• Describe your experience configuring one-way and two-way Active Directory trusts. What issues have you encountered?
• Have you used Resource Updating Manager (RUM)? What resources have you updated during migrations?
• Describe a difficult migration issue involving Active Directory replication, Kerberos, DNS, or trust relationships that you successfully resolved.
• What PowerShell scripts have you written to automate migration activities or validate migration success?
• How do you validate that users retain access to legacy file shares and applications after migration?
• Have you supported large-scale migration cutovers or migration waves? Approximately how many users or endpoints were included in your largest migration event?
• What experience do you have working in DISA or other DoD environments requiring STIG compliance during migration activities?
• Describe your experience migrating Windows user profiles while preserving user settings, application configurations, and desktop experience.