Job Description
Job Description Contract Engineer – Active Directory / Identity Management
Engagement Overview
Contract role (initial 90 days with potential extension) focused on Active Directory, DNS/DHCP, and Identity Management (AD / Azure AD / Entra ID). On-site preferred; hybrid considered.
Role Summary
Seeking a hands-on engineer with strong Active Directory and identity expertise to assess, optimize, and support a complex AD and hybrid identity environment. This is both a delivery and advisory role with long-term potential.
Key Responsibilities
Active Directory & Identity (Primary Focus)
- Assess AD environment (domain/forest design, OUs, GPOs, replication, DNS, FSMO roles).
- Remediate stale accounts, orphaned objects, and security group sprawl.
- Optimize Azure AD (Entra ID), including hybrid identity (Azure AD Connect / Cloud Sync), MFA, and conditional access.
- Evaluate and improve identity lifecycle management (provisioning, offboarding, privileged access, service accounts).
- Develop a prioritized identity and AD improvement roadmap.
- Provide ongoing SME support and escalation for AD/identity issues.
- Create and maintain operational documentation, standards, and runbooks.
Required Skills
- Strong Active Directory expertise (multi-domain/forest, GPOs, replication, DNS/DHCP).
- Azure AD / Entra ID and hybrid identity experience.
- Deep DNS/DHCP knowledge in enterprise environments.
- Windows Server administration fundamentals.
- Strong documentation and cross-team communication skills.
Preferred
- Microsoft Identity certifications.
- Experience with identity governance and access management.
- Familiarity with tools like Microsoft Defender for Identity.
- Automation/scripting (PowerShell, etc.).
- Consulting or professional services experience.
Key Deliverables (Highlights)
- AD current-state assessment and health report (Weeks 1–3).
- Azure AD / Entra ID review and recommendations (Weeks 2–4).
- Identity roadmap and action plan (Week 4).
- Ongoing AD remediation, optimization, and operational support.
- Documentation, standards, and runbooks.