Cyber Identity - Active Directory-Entra ID Manager

at  Deloitte

Job Title: Manager (Microsoft Identity-Entra ID and Active Directory (AD))
Are you interested in working in a dynamic environment that offers opportunities for professional growth and new responsibilities? If so, Deloitte & Touche LLP could be the place for you. Traditional security programs have often been unsuccessful in unifying the need to both secure and support technology innovation required by the business. Join Deloitte’s Advisory Cyber Risk Services team and become a member of the largest group of Cyber Risk individuals worldwide.
Recruiting for this role ends on 12/02/2024.

ADDITIONAL REQUIREMENTS:

• Tech/BE/BCA/MCA Degree required. Ideally in Computer Science, Cyber Security, Information Security, Engineering, Information Technology.

WORK YOU’LL DO

As a Senior Consultant, you will be at the front lines with our clients supporting them with their Cyber Risk needs specifically helping them address Active Directory (AD) health and navigate the journey to the Cloud on the Microsoft Entra ID Platform. This will include:

• Conducting analysis and recommendations of clients’ Microsoft Entra ID and Active Directory environments. This can include Entra ID components such as tenant configurations and hardening, IGA, MFA, SSO and IDP migrations, conditional access, B2B and B2C
• Architect, design, and implement large-scale Active Directory / Entra ID deployments/migrations/upgrades
• Performing technical health checks for the AD/Entra ID platforms/environments prior to broader deployments
• Supporting proof of concept and production deployments of Entra ID and AD
• Assisting clients with transitions to the Microsoft Entra ID services such as tenant setup and service configuration
• Assisting clients with Azure B2B, B2C including SAML, OAUTH, OpenID Connect protocols
• Assisting clients with Migrating applications (legacy platforms or other) to Entra ID as the IDP
• Assisting clients cleaning up the Active Directory environment and preparing for Azure AD/O365 migration/ integration
• Architect, design, and implement large-scale Active Directory domain consolidation and domain migration activities.
• Assisting clients with Domain clean-up activities including, privileged groups and service accounts management
• Assisting clients with configuration and delivery of Entra ID and AD security and compliance reports and advanced threat protection capabilities such as Defender for Identity.
• Assisting clients manage / migrate / deploy their LDAP environments including application integration, server upgrades and patching
• Assisting clients with Microsoft best practices for GPO policies and domain hardening to improve security poster and reducing attack surface of Active Directory
• Assisting clients prepare their Active Directory DR plans and perform regular DR trial runs
• Monitoring the health of Active Directory Domain Controllers, File Servers or other servers and detecting and mitigating any breaches with the help of products such as Microsoft Defender
• Assisting clients through Merger and Acquisitions or splits in organizations by merging or splitting their Active Directory domains and forests
• Providing technical support for AD/Entra ID services and resolve service-related issues through research and troubleshooting and working with Microsoft.
• Implementation of industry leading practices around AD/Entra ID
• Troubleshooting system level problems in a multi-vendor, multi-protocol network environment for Entra ID and AD
• Document platform technical issues, analysis, client communication, and resolution as part of cyber risk mitigation steps.
• Execute on AD/Entra ID engagements during different phases of the lifecycle – assess, design, and implementation & post implementation reviews.
• Perform health check, discovery and cleanup of Active Directory and Entra ID Infrastructure
• Analyze and review Active Directory services such as DNS, DHCP, Group Policy etc.
• Perform Active Directory security assessments specific to ESAE implementations
• Implement Active Directory RBAC model to secure the AD environment
• Acting as a subject matter expert on cyber risk for the Microsoft Active Directory and Entra ID platforms.
• Contribute to eminence activities, such as whitepapers pertaining to Microsoft IAM technologies

OUR PURPOSE

Deloitte’s purpose is to make an impact that matters for our clients, our people, and in our communities. We are creating trust and confidence in a more equitable society. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. We are focusing our collective efforts to advance sustainability, equity, and trust that come to life through our core commitments.