Quest Migration Pro SME

Global Enterprise Services • Fort Meade, MD

6d

About The Position

GES is seeking a highly skilled Quest Migration Pro Subject Matter Expert (SME) to support the Defense Enclave Services (DES) program, an enterprise-scale digital modernization initiative for DISA and DoD Fourth Estate Agencies. The role serves as the technical authority for enterprise Active Directory migrations using Quest Migration Manager (QMM) / Quest Migrator Pro. The SME leads planning, design, implementation, troubleshooting, and optimization of large-scale domain consolidation and user migration efforts, ensuring secure migration of user identities, workstations, profiles, and applications with minimal operational impact.

The position partners with Active Directory, Identity Management, Endpoint Engineering, Security, and Program Management teams to develop migration strategies supporting thousands of users across multiple DoD organizations. It requires deep expertise in Active Directory migrations, SID History, inter-forest trusts, Windows endpoint migrations, and Quest migration tooling, along with strong communication skills for collaboration with government stakeholders and mission partners.

The role also provides technical leadership during migration events, cutovers, and post-migration stabilization; supports security assessments and STIG-compliant migration solutions; and develops automation, documentation, and operational processes for enterprise migration activities.

Requirements

• Bachelor’s degree with 7–10 years of relevant experience, or a master’s degree with 5–8 years of experience; additional experience may be considered in lieu of a degree.
• Active DoD Secret clearance.
• At least 7 years of experience supporting enterprise Microsoft Active Directory environments.
• At least 3 years of hands-on experience with Quest Migration Manager (QMM), Quest Migrator Pro, or an equivalent enterprise Active Directory migration solution.
• Experience designing and supporting Active Directory forest migrations, consolidations, or restructures.
• Strong understanding of Active Directory forests, domains, trusts, sites, replication, DNS, FSMO roles, Group Policy, and authentication.
• Experience implementing and supporting SID History migration and resource access preservation.
• Experience migrating Windows workstation profiles while maintaining user data and application functionality.
• Strong PowerShell scripting skills for migration automation and reporting.
• Experience troubleshooting Active Directory authentication, Kerberos, LDAP, DNS, and trust-related issues.
• Experience supporting enterprise Windows 10/11 environments.
• Experience working directly with customers and stakeholders to gather requirements, provide migration status, and resolve technical issues.
• Strong communication, organizational, analytical, and problem-solving skills, with the ability to support large enterprise migration activities.
• Experience using Atlassian tools, including Jira and Confluence.
• Current DoD 8570 IAT Level II certification, such as Security+ CE, CISSP, or equivalent.

Nice To Haves

• Experience supporting migrations exceeding 10,000 users or devices.
• Experience supporting Defense Enclave Services (DES), DISA, or other large DoD enterprise environments.
• Experience integrating Quest Migration Manager with MECM, Microsoft Intune, Azure AD, or Microsoft Entra ID.
• Experience with Microsoft Identity Manager (MIM), Active Directory Federation Services (AD FS), or Microsoft Entra Connect.
• Knowledge of Zero Trust architecture and identity modernization initiatives.
• Experience supporting enterprise file server migrations and security translation.
• Experience with Windows Autopilot, Microsoft Intune, and modern endpoint management.
• Microsoft certifications such as Microsoft Certified: Identity and Access Administrator Associate or Windows Server Hybrid Administrator Associate.
• Quest-certified training or professional experience administering Quest Migration Manager.

Responsibilities

• Lead the planning, design, and execution of enterprise Active Directory migrations using Quest Migration Manager (QMM) / Quest Migrator Pro.
• Design and implement migration strategies for users, groups, computers, service accounts, and security principals between Active Directory forests.
• Develop migration runbooks, wave plans, rollback procedures, and technical documentation.
• Configure and administer Quest Migration Manager components, including Directory Synchronization, Resource Updating Manager, Migration Manager for Active Directory, and associated migration agents.
• Design, configure, and troubleshoot one-way Active Directory trusts for migration operations.
• Implement and validate SID History migration in accordance with DoD security requirements and migration objectives.
• Perform workstation profile migrations using Quest tools while preserving user settings, permissions, and application functionality.
• Coordinate with Endpoint Engineering teams supporting MECM, Intune, Autopilot, Group Policy, and Windows deployment solutions.
• Collaborate with Identity Management teams to synchronize Active Directory objects, resolve identity conflicts, and maintain directory integrity.
• Support migration of file-share access, application permissions, and other security resources requiring SID History or resource updating.
• Troubleshoot migration failures involving Active Directory replication, Kerberos authentication, DNS, trusts, Group Policy processing, and Windows security.
• Develop PowerShell automation for migration validation, reporting, provisioning, cleanup, and operational efficiency.
• Support security assessments and implementation of STIG-compliant migration solutions while identifying and mitigating operational risks.
• Provide technical leadership during migration events, cutovers, and post-migration stabilization activities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior