Microsoft Security Active Directory Manager

Deloitte • Dallas, TX

1d • $134,500 - $265,100

About The Position

As an Engineering Manager II on Deloitte Cyber’s Digital Trust & Privacy practice, this role leads Active Directory and identity infrastructure engagements throughout assessment, design, migration, implementation, stabilization, and post-implementation. The work includes evaluating enterprise Active Directory architecture and operations; implementing security and hardening improvements; supporting hybrid identity integrations; and leading or supporting domain and forest migrations, separations, and consolidations. The role requires up to 50% travel on average, depending on client work and the industries served. Recruiting for this role ends on 10/22/2026.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, another technical field, or equivalent work experience.
• 6+ years of experience in technical consulting, enterprise infrastructure, identity security, or Active Directory engineering.
• 6+ years of hands-on experience designing, securing, assessing, migrating, or operating Microsoft Active Directory environments.
• Experience with enterprise Active Directory services, including domain and forest architecture, domain controllers and replication, DNS, DHCP, Sites and Services, Group Policy, trusts, service accounts, LDAP, and domain or forest recovery.
• Experience leading or supporting Active Directory domain or forest migrations, separations, or consolidations.
• Experience with migration tooling such as Quest On Demand Migration (ODM) or Semperis migration capabilities.
• Experience with identity threat detection, identity resilience, cyber recovery, or recovery validation tooling such as Semperis, Rubrik, or Microsoft Defender for Identity.
• Ability to travel up to 50%, on average, based on the work performed and the clients and industries or sectors served.
• Ability to work independently and collaboratively as part of a team.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.
• Ability to lead projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment.
• Strong interpersonal skills and professional demeanor.
• Ability to meet deadlines.
• Ability to provide clear guidance to others.

Nice To Haves

• Advanced degree in Cybersecurity, Information Technology, Engineering, or another technical field.
• Experience with Active Directory security assessments, attack-path analysis, domain hardening, and privileged access management.
• Experience with enterprise identity security architectures, including ESAE, tiered administration, administrative forests, or privileged access workstations.
• Experience supporting mergers, acquisitions, divestitures, carve-outs, spin-offs, or enterprise reorganizations involving Active Directory environments.
• Experience with Microsoft Entra ID, federation, synchronization, MFA, SSO, or hybrid identity architectures.
• Certifications such as CISSP, CCSK, Microsoft SC-300, or CCNA.

Responsibilities

• Lead Active Directory and identity infrastructure engagements across assessment, design, migration, implementation, stabilization, and post-implementation phases.
• Perform and oversee Active Directory assessments covering domain and forest architecture, domain controllers, Sites and Services, DNS, DHCP, replication, trusts, Group Policy, privileged groups, service accounts, authentication protocols, and administrative processes.
• Design and implement Active Directory security and hardening improvements, including administrative tiering, role-based access controls, service account management, Group Policy controls, and identity threat detection and recovery capabilities.
• Architect and support enterprise Active Directory environments, including hybrid identity integrations with Microsoft Entra ID, federation, synchronization services, and application dependencies.
• Lead or support domain and forest migrations, separations, and consolidations, including discovery, dependency analysis, cutover planning, validation, rollback, and post-migration stabilization.

Benefits

• May be eligible to participate in a discretionary annual incentive program, subject to program rules and performance factors.
• Professional development opportunities, including on-the-job learning, formal development programs, leadership opportunities, and mentorship.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager