- Company Name
- Resource Consultings Services Inc
- Job Title
- Senior Active Directory Consultant
- Job Description
-
Job Title:
Senior Active Directory Consultant
Role Summary:
Lead the design, implementation, and migration of a secure, enterprise‑grade hybrid Active Directory (AD) architecture integrating Entra ID (Azure AD) with on‑premises infrastructure, including RODCs, PKI, and custom AD‑integrated DNS. Provide technical leadership across teams to ensure security hardening, PAM integration, and compliance with modern identity & access management best practices.
Expactations:
• Deliver a fully documented, scalable AD forest and domain design within 4‑month project timeline.
• Execute migration of workstations and servers from Entra‑joined to hybrid‑joined state within 2‑month migration window.
• Apply least‑privilege administrative models, secure Group Policy baselines, and disabling legacy authentication protocols.
• Provide post‑migration security validation, documentation, and stakeholder roadmap.
Key Responsibilities:
- Design and implement hybrid AD architecture, including RODCs on Azure VMs and on‑premises.
- Build and configure AD Certificate Services (PKI) and AD‑integrated DNS with Azure DNS integration.
- Establish secure Group Policy baseline, AD auditing, logging, and backup/disaster recovery strategy.
- Lead migration of devices and servers, ensuring seamless Entra‑ID to hybrid transition.
- Integrate and oversee PAM tools, including CyberArk configuration, with AD.
- Drive security governance, least‑privilege administration, and privileged access management architecture.
- Deliver documentation, security validation reports, and technical guidance to stakeholders.
Required Skills:
- 8–12+ years in AD, Azure AD, and identity & access management.
- Proven hybrid AD transformation experience.
- Expertise in AD forest/domain design, PKI, Azure VM‑hosted domain controllers, AD‑integrated DNS, Azure DNS, secure GPOs, auditing, and logging.
- Deep knowledge of disabling legacy protocols (NTLM, SMB1, etc.) and implementing least‑privilege models.
- Hands‑on CK work with AD backup and DR strategies.
Required Education & Certifications:
- Bachelor’s degree in Computer Science, Information Technology, or related field.
- Certifications such as Microsoft Certified: Azure Administrator Associate, Microsoft Certified: Identity and Access Administrator Associate, or equivalent.