FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in engineering enterprise Active Directory within multi-domain and multi-forest environments, with a strong focus on identity workstream execution during acquisitions and divestitures. Proficient in security practices, directory migrations, and automation using PowerShell.
Highest-signal resume keywords
Enterprise Active Directory EngineeringIdentity Workstream ExecutionAdvanced PowerShell ScriptingActive Directory Security PracticesHybrid Identity Management
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Active Directory Migration Tool (ADMT)Microsoft Entra ConnectQuest Migration ToolsInter-Forest MigrationDNS ManagementDHCP ManagementGroup Policy Objects (GPO)Public Key Infrastructure (PKI)Automation ScriptingCross-Forest Design
Soft Skills
Excellent Communication SkillsMentoring Junior Engineers
Tools & Technologies
Microsoft Entra IDBinary Tree On Demand MigrationMigration Manager
Industry Keywords
SOX ComplianceHIPAA CompliancePCI ComplianceGDPR ComplianceTechnical Debt Management
Tech Stack
Tools & technologiesCloudDNS
About the role
Key responsibilities & impact- Design and build identity workstreams for acquisitions and divestitures
- Assess newly acquired environments, including forests, domains, trusts, GPOs, schema, DNS, PKI, service accounts, privileged access, and technical debt
- Design and execute directory migration, consolidation, and coexistence across multiple forests
- Work with IT leadership, Security, Legal, and the Integration Management Office to deliver Day-1 readiness and long-term identity consolidation
- Plan and execute inter-forest migrations of users, groups, computers, and service accounts
- Remediate and rationalize acquired objects before migration
- Migrate or rebuild DNS, DHCP, file servers and shares, ACLs, ADCS/PKI, service accounts, and LDAP/Kerberos-dependent applications
- Deliver cross-company email/calendar visibility, collaboration access, and SSO to shared applications
- Decommission forests, domains, legacy trusts, domain controllers, and stale objects
- Support divestitures through dependency mapping, entitlement cleanup, and Transition Service Agreement identity support
- Assess security posture and design secure connectivity between companies
- Remediate common Active Directory attack paths
- Partner with Security/SOC on monitoring, logging, and incident response
- Support audit, compliance, and regulatory requirements including SOX, HIPAA, PCI, and GDPR
- Maintain runbooks, cutover plans, rollback plans, and post-migration validation checklists
- Provide Tier 3 support for complex AD, DNS, DHCP, GPO, and PKI issues
- Mentor junior engineers and contribute to standards and automation
- Keep the acquisition integration playbook current and improve it after each deal
- Coordinate tenant-to-tenant activities with messaging and collaboration teams
Requirements
What you’ll need- 8+ years of experience engineering enterprise Active Directory in multi-domain / multi-forest environments
- At least 2–3 completed acquisitions or mergers where you personally led or executed the identity workstream
- Hands-on experience with Quest / Binary Tree On Demand Migration or Migration Manager, Microsoft Active Directory Migration Tool (ADMT), Microsoft Entra Connect / Cloud Sync, or equivalent third-party migration tools
- Deep knowledge of trust types and cross-forest design, including selective authentication, SID filtering, SID history, and quarantine
- Experience consolidating acquired forests into a single target forest, including inter-forest migrations of at least 1,000+ users and source-forest decommissioning
- Strong understanding of AD security, including tiered administration model, PAM/PAW, LAPS, Kerberos/NTLM hardening, ADCS security, and AD attack and defense techniques
- Strong working knowledge of DNS, DHCP, GPO, Sites & Services, replication, and PKI/ADCS
- Advanced PowerShell scripting for automation, reporting, and bulk operations
- Experience with hybrid identity: Microsoft Entra ID, Entra Connect, tenant-to-tenant migration, and Conditional Access
- Excellent communication skills; able to explain risk and tradeoffs to executives, legal, and non-technical stakeholders
- On-call and weekend cutover work is expected during migrations
- Bachelor's degree in IT, Computer Science, or equivalent experience (preferred qualification)
Benefits
Comp & perks- Medical, dental, and vision care
- Backup dependent care
- Adoption assistance
- Infertility coverage
- Family building support
- Behavioral health solutions
- Paid parental leave
- Paid caregiver leave
- Training programs
- Professional development resources
- Mentorship programs
- Employee resource groups
- Volunteer activities