Cyber Identity - Active Directory-Entra ID Manager - Deloitte
Houston, TX 77001
About the Job
Position Summary
Job Title: Manager (Microsoft Identity-Entra ID and Active Directory (AD))
Are you interested in working in a dynamic environment that offers opportunities for professional growth and new responsibilities? If so, Deloitte & Touche LLP could be the place for you. Traditional security programs have often been unsuccessful in unifying the need to both secure and support technology innovation required by the business. Join Deloitte's Advisory Cyber Risk Services team and become a member of the largest group of Cyber Risk individuals worldwide.
Recruiting for this role ends on 12/02/2024.
Work you’ll do
As a Senior Consultant, you will be at the front lines with our clients supporting them with their Cyber Risk needs specifically helping them address Active Directory (AD) health and navigate the journey to the Cloud on the Microsoft Entra ID Platform. This will include:
Conducting analysis and recommendations of clients’ Microsoft Entra ID and Active Directory environments. This can include Entra ID components such as tenant configurations and hardening, IGA, MFA, SSO and IDP migrations, conditional access, B2B and B2CArchitect, design, and implement large-scale Active Directory / Entra ID deployments/migrations/upgradesPerforming technical health checks for the AD/Entra ID platforms/environments prior to broader deploymentsSupporting proof of concept and production deployments of Entra ID and ADAssisting clients with transitions to the Microsoft Entra ID services such as tenant setup and service configurationAssisting clients with Azure B2B, B2C including SAML, OAUTH, OpenID Connect protocolsAssisting clients with Migrating applications (legacy platforms or other) to Entra ID as the IDPAssisting clients cleaning up the Active Directory environment and preparing for Azure AD/O365 migration/ integrationArchitect, design, and implement large-scale Active Directory domain consolidation and domain migration activities.Assisting clients with Domain clean-up activities including, privileged groups and service accounts managementAssisting clients with configuration and delivery of Entra ID and AD security and compliance reports and advanced threat protection capabilities such as Defender for Identity.Assisting clients manage / migrate / deploy their LDAP environments including application integration, server upgrades and patching
Assisting clients with Microsoft best practices for GPO policies and domain hardening to improve security poster and reducing attack surface of Active DirectoryAssisting clients prepare their Active Directory DR plans and perform regular DR trial runsMonitoring the health of Active Directory Domain Controllers, File Servers or other servers and detecting and mitigating any breaches with the help of products such as Microsoft DefenderAssisting clients through Merger and Acquisitions or splits in organizations by merging or splitting their Active Directory domains and forestsProviding technical support for AD/Entra ID services and resolve service-related issues through research and troubleshooting and working with Microsoft.Implementation of industry leading practices around AD/Entra IDTroubleshooting system level problems in a multi-vendor, multi-protocol network environment for Entra ID and ADDocument platform technical issues, analysis, client communication, and resolution as part of cyber risk mitigation steps.Execute on AD/Entra ID engagements during different phases of the lifecycle – assess, design, and implementation & post implementation reviews.Perform health check, discovery and cleanup of Active Directory and Entra ID InfrastructureAnalyze and review Active Directory services such as DNS, DHCP, Group Policy etc.Perform Active Directory security assessments specific to ESAE implementationsImplement Active Directory RBAC model to secure the AD environmentActing as a subject matter expert on cyber risk for the Microsoft Active Directory and Entra ID platforms.
Contribute to eminence activities, such as whitepapers pertaining to Microsoft IAM technologies
The team
Deloitte Advisory's Cyber Risk team helps complex organizations more confidently pursue their growth, innovation and performance agendas through proactive management of the associated cyber risks. Our professionals provide advisory and implementation services that integrate risk, regulatory, and technology skills to help clients transform their legacy programs into proactive Secure.Vigilant.Resilient.TM cyber risk programs. Join the team developing the future state of cyber risk solutions. Learn more about Deloitte Advisory’s Cyber Risk Services practice.
Required:
Ability to travel 25-50%, on average, based on the work you do and the clients and industries/sectors you serve7+ years of experience in technical consulting, client problem solving, architecting, and designing solutions around Microsoft Identity solutions ( AD and or Entra ID).
Working experience in at least one of the areas listed below.
7+ years of hands-on technical experience enterprise-with Microsoft Identity and Access management services (Entra ID, Entra ID premium solutions, conditional access, SSO, MFA, PAM/PIM, and third party IAM solution integration with Entra ID) in implementation and operations. This should include designing and implementing Entra ID for organizations including integrations with applications.7+ years of hands-on technical experience Identity and Access Management (IAM) on Active Directory. This should include designing and implementing AD for organizations including integrations with applications, ADFS, AD Domain Clean up, Domain and Forest Recovery, managing GPO objects and gMSA and security groups. IAM solution integration with AAD and VDS in implementation and operations. This should include designing and implementing Active Directory trusts and federation for organizations including integrations with applications for SSO and object provisioning.
Ideally the following technical experience:
5+ years of working with IAM Protocols such as WS-Fed, SAML, OpenID Connect and OAuth.5+ years of hands-on technical experience implementing IAM focused security solutions for Microsoft technologies such as Active Directory
Limited immigration sponsorship may be available.
Additional Requirements:
Tech/BE/BCA/MCA Degree required. Ideally in Computer Science, Cyber Security, Information Security, Engineering, Information Technology.
Preferred:
Certifications such as: Microsoft new roles-based certifications (eg. SC 300), CCSP, CCSK, CISSP, CCNP, CCNA, MCSE, MCSA certification a plus.
Information for applicants with a need for accommodation:
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $124616 to $240488.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Recruiting tips
From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.
Benefits
At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you.
Our people and culture
Our diverse, equitable, and inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ideas and perspectives, and bring more creativity and innovation to help solve our client most complex challenges. This makes Deloitte one of the most rewarding places to work. Learn more about our inclusive culture.
Our purpose
Deloitte’s purpose is to make an impact that matters for our clients, our people, and in our communities. We are creating trust and confidence in a more equitable society. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. We are focusing our collective efforts to advance sustainability, equity, and trust that come to life through our core commitments. Learn more about Deloitte's purpose, commitments, and impact.
Professional development
From entry-level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.
As used in this posting, "Deloitte Advisory" means Deloitte & Touche LLP, which provides audit and enterprise risk services; Deloitte Financial Advisory Services LLP, which provides forensic, dispute, and other consulting services; and its affiliate, Deloitte Transactions and Business Analytics LLP, which provides a wide range of advisory and analytics services. Deloitte Transactions and Business Analytics LLP is not a certified public accounting firm. Please see for a detailed description of the legal structure of Deloitte LLP and its subsidiaries. These entities are separate subsidiaries of Deloitte LLP.All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.Deloitte will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance. See notices of various ban-the-box laws where available.Requisition code: 202463AccoladesRisk Management and Governance
| Cyber RiskSame job available in 56 locations
Job Title: Manager (Microsoft Identity-Entra ID and Active Directory (AD))
Are you interested in working in a dynamic environment that offers opportunities for professional growth and new responsibilities? If so, Deloitte & Touche LLP could be the place for you. Traditional security programs have often been unsuccessful in unifying the need to both secure and support technology innovation required by the business. Join Deloitte's Advisory Cyber Risk Services team and become a member of the largest group of Cyber Risk individuals worldwide.
Recruiting for this role ends on 12/02/2024.
Work you’ll do
As a Senior Consultant, you will be at the front lines with our clients supporting them with their Cyber Risk needs specifically helping them address Active Directory (AD) health and navigate the journey to the Cloud on the Microsoft Entra ID Platform. This will include:
Conducting analysis and recommendations of clients’ Microsoft Entra ID and Active Directory environments. This can include Entra ID components such as tenant configurations and hardening, IGA, MFA, SSO and IDP migrations, conditional access, B2B and B2CArchitect, design, and implement large-scale Active Directory / Entra ID deployments/migrations/upgradesPerforming technical health checks for the AD/Entra ID platforms/environments prior to broader deploymentsSupporting proof of concept and production deployments of Entra ID and ADAssisting clients with transitions to the Microsoft Entra ID services such as tenant setup and service configurationAssisting clients with Azure B2B, B2C including SAML, OAUTH, OpenID Connect protocolsAssisting clients with Migrating applications (legacy platforms or other) to Entra ID as the IDPAssisting clients cleaning up the Active Directory environment and preparing for Azure AD/O365 migration/ integrationArchitect, design, and implement large-scale Active Directory domain consolidation and domain migration activities.Assisting clients with Domain clean-up activities including, privileged groups and service accounts managementAssisting clients with configuration and delivery of Entra ID and AD security and compliance reports and advanced threat protection capabilities such as Defender for Identity.Assisting clients manage / migrate / deploy their LDAP environments including application integration, server upgrades and patching
Assisting clients with Microsoft best practices for GPO policies and domain hardening to improve security poster and reducing attack surface of Active DirectoryAssisting clients prepare their Active Directory DR plans and perform regular DR trial runsMonitoring the health of Active Directory Domain Controllers, File Servers or other servers and detecting and mitigating any breaches with the help of products such as Microsoft DefenderAssisting clients through Merger and Acquisitions or splits in organizations by merging or splitting their Active Directory domains and forestsProviding technical support for AD/Entra ID services and resolve service-related issues through research and troubleshooting and working with Microsoft.Implementation of industry leading practices around AD/Entra IDTroubleshooting system level problems in a multi-vendor, multi-protocol network environment for Entra ID and ADDocument platform technical issues, analysis, client communication, and resolution as part of cyber risk mitigation steps.Execute on AD/Entra ID engagements during different phases of the lifecycle – assess, design, and implementation & post implementation reviews.Perform health check, discovery and cleanup of Active Directory and Entra ID InfrastructureAnalyze and review Active Directory services such as DNS, DHCP, Group Policy etc.Perform Active Directory security assessments specific to ESAE implementationsImplement Active Directory RBAC model to secure the AD environmentActing as a subject matter expert on cyber risk for the Microsoft Active Directory and Entra ID platforms.
Contribute to eminence activities, such as whitepapers pertaining to Microsoft IAM technologies
The team
Deloitte Advisory's Cyber Risk team helps complex organizations more confidently pursue their growth, innovation and performance agendas through proactive management of the associated cyber risks. Our professionals provide advisory and implementation services that integrate risk, regulatory, and technology skills to help clients transform their legacy programs into proactive Secure.Vigilant.Resilient.TM cyber risk programs. Join the team developing the future state of cyber risk solutions. Learn more about Deloitte Advisory’s Cyber Risk Services practice.
Required:
Ability to travel 25-50%, on average, based on the work you do and the clients and industries/sectors you serve7+ years of experience in technical consulting, client problem solving, architecting, and designing solutions around Microsoft Identity solutions ( AD and or Entra ID).
Working experience in at least one of the areas listed below.
7+ years of hands-on technical experience enterprise-with Microsoft Identity and Access management services (Entra ID, Entra ID premium solutions, conditional access, SSO, MFA, PAM/PIM, and third party IAM solution integration with Entra ID) in implementation and operations. This should include designing and implementing Entra ID for organizations including integrations with applications.7+ years of hands-on technical experience Identity and Access Management (IAM) on Active Directory. This should include designing and implementing AD for organizations including integrations with applications, ADFS, AD Domain Clean up, Domain and Forest Recovery, managing GPO objects and gMSA and security groups. IAM solution integration with AAD and VDS in implementation and operations. This should include designing and implementing Active Directory trusts and federation for organizations including integrations with applications for SSO and object provisioning.
Ideally the following technical experience:
5+ years of working with IAM Protocols such as WS-Fed, SAML, OpenID Connect and OAuth.5+ years of hands-on technical experience implementing IAM focused security solutions for Microsoft technologies such as Active Directory
Limited immigration sponsorship may be available.
Additional Requirements:
Tech/BE/BCA/MCA Degree required. Ideally in Computer Science, Cyber Security, Information Security, Engineering, Information Technology.
Preferred:
Certifications such as: Microsoft new roles-based certifications (eg. SC 300), CCSP, CCSK, CISSP, CCNP, CCNA, MCSE, MCSA certification a plus.
Information for applicants with a need for accommodation:
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $124616 to $240488.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Recruiting tips
From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.
Benefits
At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you.
Our people and culture
Our diverse, equitable, and inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ideas and perspectives, and bring more creativity and innovation to help solve our client most complex challenges. This makes Deloitte one of the most rewarding places to work. Learn more about our inclusive culture.
Our purpose
Deloitte’s purpose is to make an impact that matters for our clients, our people, and in our communities. We are creating trust and confidence in a more equitable society. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. We are focusing our collective efforts to advance sustainability, equity, and trust that come to life through our core commitments. Learn more about Deloitte's purpose, commitments, and impact.
Professional development
From entry-level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.
As used in this posting, "Deloitte Advisory" means Deloitte & Touche LLP, which provides audit and enterprise risk services; Deloitte Financial Advisory Services LLP, which provides forensic, dispute, and other consulting services; and its affiliate, Deloitte Transactions and Business Analytics LLP, which provides a wide range of advisory and analytics services. Deloitte Transactions and Business Analytics LLP is not a certified public accounting firm. Please see for a detailed description of the legal structure of Deloitte LLP and its subsidiaries. These entities are separate subsidiaries of Deloitte LLP.All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.Deloitte will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance. See notices of various ban-the-box laws where available.Requisition code: 202463AccoladesRisk Management and Governance
| Cyber RiskSame job available in 56 locations
Source : Deloitte