Microsoft Security Active Directory Manager
About The Position
As an Engineering Manager II on Deloitte Cyber, you will lead Active Directory and identity infrastructure engagements through assessment, design, migration, implementation, stabilization, and post-implementation phases. You will assess enterprise directory environments, design and implement security improvements, support hybrid identity architectures, and lead or support domain and forest migrations, separations, and consolidations. The position is part of Deloitte Cyber’s Digital Trust & Privacy practice, which helps organizations build confidence in digital products, platforms, services, data practices, and customer experiences. The practice brings together digital trust, online protection, privacy, AI governance, identity, data protection, cybersecurity, and regulatory compliance capabilities. The role may require travel up to 50%, on average, depending on client work and industry served. Recruiting for this role ends on 4/01/2027. The disclosed estimated wage range is $134,500 to $265,100, and the employee may also be eligible for a discretionary annual incentive program.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, another technical field, or equivalent work experience.
- At least 6 years of experience in technical consulting, enterprise infrastructure, identity security, or Active Directory engineering.
- At least 6 years of hands-on experience designing, securing, assessing, migrating, or operating Microsoft Active Directory environments.
- Experience with enterprise Active Directory services, including domain and forest architecture, domain controllers and replication, DNS, DHCP, Sites and Services, Group Policy, trusts, service accounts, LDAP, and domain or forest recovery.
- Experience leading or supporting Active Directory domain or forest migrations, separations, or consolidations.
- Experience with migration tooling such as Quest On Demand Migration (ODM) or Semperis migration capabilities.
- Experience with identity threat detection, identity resilience, cyber recovery, or recovery validation tooling such as Semperis, Rubrik, or Microsoft Defender for Identity.
- Ability to travel up to 50%, on average, based on work and the clients and industries served.
- Ability to work independently and collaboratively, communicate effectively in writing and verbally, and maintain attention to detail and quality.
- Ability to build and sustain professional relationships; manage and prioritize multiple tasks in a fast-paced environment; meet deadlines; and demonstrate strong interpersonal skills and a professional demeanor.
- Limited immigration sponsorship may be available.
Nice To Haves
- Advanced degree in Cybersecurity, Information Technology, Engineering, or another technical field.
- Experience with Active Directory security assessments, attack-path analysis, domain hardening, and privileged access management.
- Experience with enterprise identity security architectures, including ESAE, tiered administration, administrative forests, or privileged access workstations.
- Experience supporting mergers, acquisitions, divestitures, carve-outs, spin-offs, or enterprise reorganizations involving Active Directory environments.
- Experience with Microsoft Entra ID, federation, synchronization, MFA, SSO, or hybrid identity architectures.
- Certifications such as CISSP, CCSK, Microsoft SC-300, or CCNA.
Responsibilities
- Lead Active Directory and identity infrastructure engagements through assessment, design, migration, implementation, stabilization, and post-implementation phases.
- Perform and oversee Active Directory assessments, including domain and forest architecture, domain controllers, Sites and Services, DNS, DHCP, replication, trusts, Group Policy, privileged groups, service accounts, authentication protocols, and administrative processes.
- Design and implement Active Directory security and hardening improvements, including administrative tiering, role-based access controls, service account management, Group Policy controls, and identity threat detection and recovery capabilities.
- Architect and support enterprise Active Directory environments, including hybrid identity integrations with Microsoft Entra ID, federation, synchronization services, and application dependencies.
- Lead or support domain and forest migrations, separations, and consolidations, including discovery, dependency analysis, cutover planning, validation, rollback, and post-migration stabilization.
- Lead projects or workstreams, provide clear guidance to others, and manage competing tasks and deadlines.
Benefits
- May be eligible to participate in a discretionary annual incentive program.
- Professional development opportunities, including on-the-job learning, formal development programs, leadership opportunities, and mentorship.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
