Senior AD Security & Identity Architect

Deloitte France; Columbus (OH); On-site; USD 105,000 - 208,000; Full time

Job summary

DeloitteCyber seeks a Senior Engineering Management Specialist to lead Active Directory and identity infrastructure projects across assessment, design, migration, and post-implementation phases. You will steer DNS, DHCP, GP, and security hardening while coordinating enterprise AD environments with Entra ID.

The role requires 4+ years in AD engineering, strong communication, and the ability to travel up to 50%. A degree in a technical field and migration tooling experience are preferred.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, or equivalent work experience.
• 4+ years of experience in technical consulting, enterprise infrastructure, identity security, or Active Directory engineering.
• 4+ years of hands-on experience designing, securing, assessing, migrating, or operating Microsoft Active Directory environments.
• Experience with enterprise Active Directory services, including domain and forest architecture, domain controllers and replication, DNS, DHCP, Sites and Services, Group Policy, trusts, service accounts, LDAP, and domain or forest recovery.
• Experience leading or supporting Active Directory domain or forest migrations, separations, or consolidations.
• Experience with migration tooling such as Quest On Demand Migration (ODM) or Semperis migration capabilities.
• Experience with identity threat detection, identity resilience, cyber recovery, or recovery validation tooling such as Semperis, Rubrik, or Microsoft Defender for Identity.
• Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve.
• Limited immigration sponsorship may be available.

Responsibilities

• Lead Active Directory and identity infrastructure engagements across assessment, design, migration, implementation, stabilization, and post-implementation phases.
• Perform and oversee Active Directory assessments covering domain and forest architecture, domain controllers, DNS, DHCP, Sites and Services, Group Policy, trusts, and more.
• Design and implement Active Directory security and hardening improvements, including administrative tiering and RBAC.
• Architect and support enterprise Active Directory environments, including hybrid identity integrations with Microsoft Entra ID and federation.
• Lead or support domain and forest migrations, separations, and consolidations, including discovery, validation, rollback, and post-migration stabilization.

Skills

Independent work

Team collaboration

Communication skills

Attention to detail

Relationship building

Project leadership

Multitasking

Interpersonal skills

Deadline driven

Education

Bachelor's degree

Tools

Quest On Demand Migration

Semperis

Microsoft Entra ID

Job description

DeloitteCyber seeks a Senior Engineering Management Specialist to lead Active Directory and identity infrastructure projects across assessment, design, migration, and post-implementation phases. You will steer DNS, DHCP, GP, and security hardening while coordinating enterprise AD environments with Entra ID.

The role requires 4+ years in AD engineering, strong communication, and the ability to travel up to 50%. A degree in a technical field and migration tooling experience are preferred.