Active Directory Consultant

The Active Directory & Entra ID Consultant leads the assessment, design, and migration planning of complex identity environments, with a primary focus on consolidating large, siloed Active Directory domains into a secure, standardized target architecture. This role conducts detailed current‑state assessments across forests, domains, trusts, GPOs, schema, and core identity services (DNS, DHCP, PKI), and designs a future‑state AD and Entra ID architecture aligned to public‑sector and higher‑education requirements. The consultant defines tiered AD designs, identity lifecycle models, and migration strategies, including tool evaluation (e.g., Quest, BitTitan), phased execution approaches, and risk mitigation plans. They design hybrid identity using Entra Connect, documenting sync scopes, attribute flows, and connector placement to preserve cloud identities during migrations. Acting as a client‑facing advisor, the consultant leads requirements‑gathering sessions, communicates architectural decisions and tradeoffs, and produces high‑quality technical documentation, runbooks, and diagrams that translate business and regulatory needs into actionable designs for engineering teams to execute.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Advanced expertise in Active Directory
AD architecture, forests/domains, trusts, schema, and GPO
Proven experience leading Active Directory consolidation and migration assessments
Strong knowledge of AD identity lifecycle and access models
Hands‑on design experience with Microsoft Entra ID / Entra Connect
Solid understanding of DNS, DHCP, and PKI (Certificates) as they relate to identity
Experience producing formal technical documentation and runbooks
Strong client‑facing communication and consulting skills
Ability to translate complex technical designs into clear, written deliverables

SQL Database Administration (identity or logging platforms)
Power BI for identity, security, or migration reporting

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.