Active Directory Architect (Domain Consolidation)

About the role

The Active Directory Architect (Domain Consolidation) will support a US‑based engagement, assessing the client’s current Active Directory, Azure/Entra ID deployment, and related identity infrastructure. The role focuses on identifying configuration and operational gaps and delivering recommendations to mitigate critical risks.

Key responsibilities

• Assess the current state of AD and Azure/Entra ID, including forest, site, domain, OU, security group, authentication, and group‑policy design.
• Manage migration of enterprise data‑governance and compliance frameworks to Microsoft Purview.
• Run PowerShell queries to gather statistics on users, accounts, groups, OUs, and computer objects.
• Execute SailPoint out‑of‑the‑box reports to provide group and account ownership information.
• Review AD configurations, processes, and documentation to understand the operating model.
• Identify and prioritize configuration and operational gaps based on risk.
• Provide remediation recommendations, resource estimates, and budget forecasts.
• Leverage tools such as ADUC, ManageEngine, StealthAUDIT, and other AD scanning utilities for data‑gathering activities.

Required profile

• Strong experience as an Active Directory Architect, including domain consolidation and enterprise identity reviews.
• Hands‑on knowledge of AD forest, site, domain, OU, security group, authentication, and group‑policy design.
• Experience assessing Azure/Entra ID deployments and hybrid identity environments.
• Ability to run and interpret PowerShell queries against AD domains.

Required skills

• Active Directory
• Azure AD / Entra ID
• PowerShell
• SailPoint
• ADUC (Active Directory Users & Computers)
• ManageEngine
• StealthAUDIT
• Microsoft Purview
• Group Policy
• Security Groups
• Organizational Units
• Domain Consolidation
• Hybrid Identity
• Data Governance
• Compliance Frameworks