The Active Directory / Entra ID Consultant is responsible for designing, governing, and overseeing the identity architecture required to migrate legacy and Active Directory–hosted applications to Entra ID. This role serves as the primary authority on identity platforms, ensuring that directory services, authentication models, and identity lifecycle processes are modernized, secure, and aligned with both business and technical requirements. The consultant works closely with network, security, project and application teams to enable a seamless and controlled transition to a cloud-based identity ecosystem.

Responsibilities:

• Lead the assessment of existing Active Directory environments, including domains, forests, trusts, and identity dependencies.
• Define the target identity architecture leveraging Entra ID, including hybrid and cloud-native identity models.
• Design and oversee implementation of directory synchronization and federation solutions (for example, Entra Connect, cloud sync, or federation services).
• Establish identity governance, lifecycle management, and provisioning/deprovisioning processes.
• Define authentication and authorization models, including Single Sign-On (SSO) and modern authentication protocols.
• Collaborate with application owners to enable migration from legacy authentication methods to Entra ID–compatible approaches.
• Ensure alignment with security requirements such as Conditional Access, MFA, and privileged access controls.
• Identify identity-related risks, technical constraints, and migration dependencies.
• Provide guidance on directory consolidation, tenant design, and identity standardization.
• Oversee testing, validation, and troubleshooting of identity integrations and authentication flows.
• Document identity architecture, standards, and migration strategies.
• Act as the subject matter expert for identity services throughout the project lifecycle.

• Strong knowledge of Microsoft Active Directory, DNS, DHCP, LDAP, Kerberos, and Group Policy
• Bachelor’s degree in Information Technology, Computer Science, or a related field (or equivalent experience).
• Proven experience as an Active Directory Architect, Identity Architect, or similar senior role.
• Deep expertise in Active Directory, including domain services, group policy, DNS integration, and trust relationships.
• Strong knowledge of Entra ID and modern identity platforms.
• Experience with hybrid identity solutions, including directory synchronization and federation.
• Solid understanding of authentication protocols (for example, Kerberos, LDAP, SAML, OAuth, OpenID Connect).
• Experience supporting or leading large-scale identity transformation or migration projects.
• Strong analytical, troubleshooting, and communication skills

• Experience in enterprise-scale environments with multi-domain/multi-forest structures
• Exposure to cloud platforms (Azure, AWS) and integration with AD
• Experience with Microsoft identity tools and services (for example, Entra Connect, Conditional Access, Identity Governance).
• Knowledge of identity security best practices and Zero Trust principles.
• Relevant certifications (for example, Microsoft Identity and Access Administrator, Azure Solutions Architect, or equivalent).
• Experience in enterprise-scale or regulated environments.

• High analytical skills
• A high degree of initiative and flexibility
• High customer orientation
• High quality awareness
• Excellent verbal and written communication skills