Active Directory-Entra ID Sr. Consultant

Deloitte - Jersey City, NJ

Full-time - Mid Level

Jersey City, NJ

Professional, Scientific, and Technical Services

About the position

The Active Directory-Entra ID Sr. Consultant role at Deloitte involves supporting clients with their Cyber Risk needs, specifically focusing on Active Directory (AD) health and the transition to the Microsoft Entra ID Platform. The consultant will conduct analyses, provide recommendations, and implement large-scale deployments and migrations, ensuring security and compliance throughout the process.

Responsibilities

• Conduct analysis and recommendations of clients' Microsoft Entra ID and Active Directory environments.
• Architect, design, and implement large-scale Active Directory / Entra ID deployments/migrations/upgrades.
• Perform technical health checks for the AD/Entra ID platforms/environments prior to broader deployments.
• Support proof of concept and production deployments of Entra ID and AD.
• Assist clients with transitions to the Microsoft Entra ID services such as tenant setup and service configuration.
• Assist clients with Azure B2B, B2C including SAML, OAUTH, OpenID Connect protocols.
• Assist clients with migrating applications to Entra ID as the IDP.
• Assist clients in cleaning up the Active Directory environment and preparing for Azure AD/O365 migration/integration.
• Architect, design, and implement large-scale Active Directory domain consolidation and migration activities.
• Assist clients with domain clean-up activities including privileged groups and service accounts management.
• Assist clients with configuration and delivery of Entra ID and AD security and compliance reports.
• Assist clients in managing/migrating/deploying their LDAP environments.
• Assist clients with Microsoft best practices for GPO policies and domain hardening.
• Assist clients in preparing their Active Directory DR plans and perform regular DR trial runs.
• Monitor the health of Active Directory Domain Controllers and detect breaches using Microsoft Defender.
• Assist clients through mergers and acquisitions by merging or splitting their Active Directory domains.
• Provide technical support for AD/Entra ID services and resolve service-related issues.
• Implement industry-leading practices around AD/Entra ID.
• Troubleshoot system-level problems in a multi-vendor, multi-protocol network environment for Entra ID and AD.
• Document platform technical issues, analysis, client communication, and resolution as part of cyber risk mitigation steps.
• Execute on AD/Entra ID engagements during different phases of the lifecycle - assess, design, implementation & post-implementation reviews.
• Perform health check, discovery, and cleanup of Active Directory and Entra ID Infrastructure.
• Analyze and review Active Directory services such as DNS, DHCP, Group Policy.
• Perform Active Directory security assessments specific to ESAE implementations.
• Implement Active Directory RBAC model to secure the AD environment.

Requirements

• Experience with Microsoft Entra ID and Active Directory environments.
• Strong understanding of cloud technologies and migration processes.
• Knowledge of security best practices for Active Directory and Entra ID.
• Ability to conduct technical health checks and assessments.
• Experience with Azure B2B, B2C, SAML, OAUTH, and OpenID Connect protocols.
• Familiarity with LDAP environments and application integration.
• Strong troubleshooting skills in multi-vendor, multi-protocol network environments.

Nice-to-haves

• Certifications in Microsoft technologies or Cybersecurity.
• Experience with Microsoft Defender for Identity.
• Knowledge of Group Policy Objects (GPO) management.
• Experience with disaster recovery planning for Active Directory.

Benefits

• Professional development opportunities.
• Dynamic work environment with growth potential.
• Access to a large network of Cyber Risk professionals.