Deloitte Cyber

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

Recruiting for this role ends on December 25, 2025.

Work you’ll do

As a Manager, you will be at the front lines with our clients supporting them with their Cyber Risk needs specifically helping them address Active Directory (AD) health and navigate the journey to the Cloud on the Microsoft Entra ID Platform. This will include:

• Conducting analysis and recommendations of clients’ Microsoft Entra ID and Active Directory environments. This can include Entra ID components such as tenant configurations and hardening, IGA, MFA, SSO and IDP migrations, conditional access, B2B and B2C
• Architect, design, and implement large-scale Active Directory deployments/migrations/upgrades, and execute on AD engagements during different phases of the lifecycle – assess, design, and implementation & post implementation reviews.
• Performing technical health checks for the AD platforms/environments prior to broader deployments, supporting proof of concept and production deployments of AD.
• Assisting clients with transitions to the Microsoft Entra ID services such as tenant setup and service configuration, Azure B2B, B2C including SAML, OAUTH, OpenID Connect protocols, migrating applications (legacy platforms or other) to Entra ID as the IDP, cleaning up the Active Directory environment and preparing for Azure AD/O365 migration/ integration, domain clean-up activities including, privileged groups and service accounts management, configuration and delivery of Entra ID and AD security and compliance reports and advanced threat protection capabilities such as Defender for Identity, manage/migrate/deploy their LDAP environments including application integration, server upgrades and patching, prepare their Active Directory DR plans and perform regular DR trial runs
• Providing technical support for AD services and resolve service-related issues through research and troubleshooting and working with Microsoft, document platform technical issues, analysis, client communication, and resolution as part of cyber risk mitigation steps, and perform health check, discovery and cleanup of Active Directory and Entra ID Infrastructure
• Acting as a subject matter expert on cyber risk for the Microsoft Active Directory platforms.

The team

Required:

• Ability to travel 25-50%, on average, based on the work you do and the clients and industries/sectors you serve
• 7+ years of experience in technical consulting, client problem solving, architecting, and designing solutions around Microsoft Identity solutions ( (Active Directory). 
• Tech/BE/BCA/MCA Degree required. Ideally in Computer Science, Cyber Security, Information Security, Engineering, Information Technology.

Preferred: Working experience in at least one of the areas listed below.

• 7+ years of hands-on technical experience enterprise-with Microsoft Identity and Access management services (Active Directory) in implementation and operations. This should include designing and implementing AD for organizations including integrations with applications.
• 7+ years of hands-on technical experience Identity and Access Management (IAM) on Active Directory. This should include designing and implementing AD for organizations including integrations with applications, ADFS, AD Domain Clean up, Domain and Forest Recovery, managing GPO objects and gMSA and security groups. IAM solution integration with AAD and VDS in implementation and operations. This should include designing and implementing Active Directory trusts and federation for organizations including integrations with applications for SSO and object provisioning.

Also preferred: 

• 5+ years of working with IAM Protocols such as WS-Fed, SAML, OpenID Connect and OAuth.
• 5+ years of hands-on technical experience implementing IAM focused security solutions for Microsoft technologies such as Active Directory.
• Certifications such as: Microsoft new roles-based certifications (eg. SC 300), CCSP, CCSK, CISSP, CCNP, CCNA, MCSE, MCSA certification a plus.
• Limited immigration sponsorship may be available.

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $144,200 - $265,600.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Information for applicants with a need for accommodation: https://www2.deloitte.com/us/en/pages/careers/articles/join-deloitte-assistance-for-disabled-applicants.html