Active Directory Migration Technical Lead
Location: Remote
About the Opportunity
An established organization is seeking a specialist to drive an enterprise-wide consolidation of two existing directory environments into a single, unified target. This six-month initiative runs from January 1, 2027, through June 30, 2027, under a flexible work arrangement. The role serves as the central subject matter authority coordinating technical strategy across internal IT personnel, application owners, and external vendor teams.
Responsibilities
- Direct overall technical planning, trial testing, implementation cutovers, and post-cutover operational stabilization.
- Evaluate and verify the architectural design, cutover schedules, deployment techniques, and migration toolsets.
- Assess application dependencies regarding service accounts, authentication methods, authorization rules, and directory synchronization.
- Collaborate with internal infrastructure specialists, software owners, and implementation vendors to align migration milestones.
- Review and mitigate impacts on identity platforms such as CyberArk and Okta, focusing on provisioning and privileged accounts.
- Audit security group structures, permissions, account mappings, and user profiles to uphold least-privilege standards and prevent duplication.
- Establish robust operational cutover checklists, technical sign-off criteria, and documented rollback strategies.
- Deliver direct technical troubleshooting and system configuration support during all transition phases.
- Identify project vulnerabilities and operational bottlenecks, communicating clear risk mitigations to technical management.
- Produce comprehensive technical documentation and guide operational handoffs to ensure knowledge transfer to internal staff.
Requirements
- Demonstrated history acting as the primary technical guide for a complex enterprise domain or forest consolidation project.
- Extensive background in configuring, designing, troubleshooting, and transitioning Microsoft directory environments.
- In-depth understanding of domain hierarchy, established trusts, Domain Name System records, GPO configurations, and directory services.
- Proven experience unifying separate directories into an existing or newly architected target platform.
- Prior success managing transitions involving intricate authentication models and extensive integrated software dependencies.
- Advanced grasp of directory protocols including Kerberos, LDAP, NTLM, Windows Integrated Authentication, and service account interactions.
- Experience building detailed cutover playbooks, technical test scenarios, and recovery processes.
- Demonstrated capability to resolve intricate directory failures and direct collaborative efforts between internal and partner teams.
- Excellent communication skills to present architectural dependencies and critical recommendations to technology leaders.
- Strong capacity to exercise independent judgment and question technical assumptions when needed.
Preferred Qualifications
- Experience executing transitions that incorporate hundreds of integrated line-of-business applications, including ERP systems.
- Hands-on familiarity with native Microsoft utilities alongside third-party platforms like Quest Migration Manager or comparable tools.
- Practical experience with environments utilizing Okta identity management.
- Exposure to CyberArk platforms, particularly regarding service account security and privileged access management.
- Direct involvement in directory integrations driven by organizational mergers or corporate restructuring.
- Familiarity with hybrid cloud architectures incorporating Microsoft Entra ID.
- Solid background in cybersecurity standards, identity governance, access restrictions, and regulatory compliance.
Pay: $80 to $90 per hour
This is a remote, work from home position. This role is to be filled outside the states of California and Colorado.
For Talution Group's benefits, please go to https://www.talution.com/consultant-info.
We are an equal opportunity employer and value diversity at our company. We do not discriminate based on race, religion, color, ethnic origin, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
Talution Group, a member of the Objective Partners family of specialized talent solution providers, uses AI-assisted tools, including Alex by Apriora, to support our recruiting process. These tools may review application materials and analyze interview responses to provide insights about a candidate's experience and qualifications. AI output informs our recruiters; decisions about whether to advance or present a candidate are made by people. Learn more about our use of AI, including how to request an accommodation: https://www.talution.com/ai-in-our-hiring-process.
#LI-JB1 #LI-Remote