Senior Active Directory & M&A Identity Engineer

Cencora, Inc.; Conshohocken (Montgomery County); On-site; USD 150,000 - 190,000; Full time

Job summary

Cencora, Inc. is seeking a Senior Active Directory Engineer to design and build identity workstreams for acquisitions, ensuring secure, auditable, and reversible connections across forests. You will lead Day‑1 readiness and long‑term consolidation with IT leadership, Security, Legal, and the IMO under tight timelines.

The role is hands‑on and requires deep AD expertise, migration tooling proficiency, and excellent communication to explain risks and tradeoffs to executives and stakeholders alike.

Qualifications

• 8+ years of experience engineering enterprise Active Directory in multi‑domain / multi‑forest environments.
• Demonstrated M&A experience: at least 2–3 acquisitions or mergers leading the identity workstream.
• Hands‑on experience with AD migration tools such as Quest / Binary Tree ODM, Migration Manager, ADMT.
• Deep knowledge of trust types and cross‑forest design, including selective authentication and SID history.
• Proven experience consolidating acquired forests into a single target forest (inter‑forest migrations of >= 1,000 users).
• Strong understanding of AD security: tiered admin, PAM/PAW, LAPS, Kerberos/NTLM hardening, ADCS security.
• DNS, DHCP, GPO, Sites & Services, replication, PKI/ADCS knowledge.
• Advanced PowerShell scripting for automation and bulk ops.
• Experience with hybrid identity (Entra ID, Entra Connect, tenant‑to‑tenant migration, CA).
• Excellent communication skills; able to explain risk to executives and non‑technical stakeholders.

Responsibilities

• Perform pre/post‑close discovery of forests, trusts, DNS, and PKI.
• Design consolidation path with temporary coexistence and secure connectivity.
• Plan inter‑forest migrations of users, groups, computers and service accounts; handle SID history and password migration.
• Remediate objects: naming collisions, UPN suffix conflicts, stale accounts, duplicate groups.
• Migrate or rebuild services: DNS zones, DHCP, file shares, ADCS/PKI, LDAP/Kerberos apps.
• Deliver Day‑1 capabilities like cross‑company email/calendar visibility and SSO.
• Lead long‑term consolidation: forest/domain decommissioning and GPO standardization.
• Coordinate with Security/Legal/IMO for compliance and audit readiness.
• Mentor juniors and contribute to automation.

Skills

Active Directory

M&A experience

AD migration tools

Cross-forest design

Hybrid identity

PowerShell scripting

DNS/DHCP/GPO

Security best practices

Communication skills

Education

Bachelor's degree in IT/CS

Tools

Quest / Binary Tree ODM

Migration Manager

ADMT

Entra Connect / Cloud Sync

ShareGate

BitTitan

Semperis

CoreView

Job description

Cencora, Inc. is seeking a Senior Active Directory Engineer to design and build identity workstreams for acquisitions, ensuring secure, auditable, and reversible connections across forests. You will lead Day‑1 readiness and long‑term consolidation with IT leadership, Security, Legal, and the IMO under tight timelines.

The role is hands‑on and requires deep AD expertise, migration tooling proficiency, and excellent communication to explain risks and tradeoffs to executives and stakeholders alike.