The Active Directory / Entra ID Consultant is responsible for designing, governing, and overseeing the identity architecture required to migrate legacy and Active Directory–hosted applications to Entra ID. This role serves as the primary authority on identity platforms, ensuring that directory services, authentication models, and identity lifecycle processes are modernized, secure, and aligned with both business and technical requirements. The consultant works closely with network, security, project and application teams to enable a seamless and controlled transition to a cloud-based identity ecosystem.Responsibilities:
The Active Directory / Entra ID Consultant is responsible for designing, governing, and overseeing the identity architecture required to migrate legacy and Active Directory–hosted applications to Entra ID. This role serves as the primary authority on identity platforms, ensuring that directory services, authentication models, and identity lifecycle processes are modernized, secure, and aligned with both business and technical requirements. The consultant works closely with network, security, project and application teams to enable a seamless and controlled transition to a cloud-based identity ecosystem.The Active Directory / Entra ID Consultant is responsible for designing, governing, and overseeing the identity architecture required to migrate legacy and Active Directory–hosted applications to Entra ID. This role serves as the primary authority on identity platforms, ensuring that directory services, authentication models, and identity lifecycle processes are modernized, secure, and aligned with both business and technical requirements. The consultant works closely with network, security, project and application teams to enable a seamless and controlled transition to a cloud-based identity ecosystem.The Active Directory / Entra ID Consultant is responsible for designing, governing, and overseeing the identity architecture required to migrate legacy and Active Directory–hosted applications to Entra ID. This role serves as the primary authority on identity platforms, ensuring that directory services, authentication models, and identity lifecycle processes are modernized, secure, and aligned with both business and technical requirements. The consultant works closely with network, security, project and application teams to enable a seamless and controlled transition to a cloud-based identity ecosystem.The Active Directory / Entra ID Consultant is responsible for designing, governing, and overseeing the identity architecture required to migrate legacy and Active Directory–hosted applications to Entra ID. This role serves as the primary authority on identity platforms, ensuring that directory services, authentication models, and identity lifecycle processes are modernized, secure, and aligned with both business and technical requirements. The consultant works closely with network, security, project and application teams to enable a seamless and controlled transition to a cloud-based identity ecosystem.Responsibilities:Responsibilities:
Responsibilities:Responsibilities:
- Lead the assessment of existing Active Directory environments, including domains, forests, trusts, and identity dependencies.
Lead the assessment of existing Active Directory environments, including domains, forests, trusts, and identity dependencies.Lead the assessment of existing Active Directory environments, including domains, forests, trusts, and identity dependencies.Lead the assessment of existing Active Directory environments, including domains, forests, trusts, and identity dependencies.
- Define the target identity architecture leveraging Entra ID, including hybrid and cloud-native identity models.
Define the target identity architecture leveraging Entra ID, including hybrid and cloud-native identity models.Define the target identity architecture leveraging Entra ID, including hybrid and cloud-native identity models.Define the target identity architecture leveraging Entra ID, including hybrid and cloud-native identity models.
- Design and oversee implementation of directory synchronization and federation solutions (for example, Entra Connect, cloud sync, or federation services).
Design and oversee implementation of directory synchronization and federation solutions (for example, Entra Connect, cloud sync, or federation services).Design and oversee implementation of directory synchronization and federation solutions (for example, Entra Connect, cloud sync, or federation services).Design and oversee implementation of directory synchronization and federation solutions (for example, Entra Connect, cloud sync, or federation services).
- Establish identity governance, lifecycle management, and provisioning/deprovisioning processes.
Establish identity governance, lifecycle management, and provisioning/deprovisioning processes.Establish identity governance, lifecycle management, and provisioning/deprovisioning processes.Establish identity governance, lifecycle management, and provisioning/deprovisioning processes.
- Define authentication and authorization models, including Single Sign-On (SSO) and modern authentication protocols.
Define authentication and authorization models, including Single Sign-On (SSO) and modern authentication protocols.Define authentication and authorization models, including Single Sign-On (SSO) and modern authentication protocols.Define authentication and authorization models, including Single Sign-On (SSO) and modern authentication protocols.
- Collaborate with application owners to enable migration from legacy authentication methods to Entra ID–compatible approaches.
Collaborate with application owners to enable migration from legacy authentication methods to Entra ID–compatible approaches.Collaborate with application owners to enable migration from legacy authentication methods to Entra ID–compatible approaches.Collaborate with application owners to enable migration from legacy authentication methods to Entra ID–compatible approaches.
- Ensure alignment with security requirements such as Conditional Access, MFA, and privileged access controls.
Ensure alignment with security requirements such as Conditional Access, MFA, and privileged access controls.Ensure alignment with security requirements such as Conditional Access, MFA, and privileged access controls.Ensure alignment with security requirements such as Conditional Access, MFA, and privileged access controls.
- Identify identity-related risks, technical constraints, and migration dependencies.
Identify identity-related risks, technical constraints, and migration dependencies.Identify identity-related risks, technical constraints, and migration dependencies.Identify identity-related risks, technical constraints, and migration dependencies.
- Provide guidance on directory consolidation, tenant design, and identity standardization.
Provide guidance on directory consolidation, tenant design, and identity standardization.Provide guidance on directory consolidation, tenant design, and identity standardization.Provide guidance on directory consolidation, tenant design, and identity standardization.
- Oversee testing, validation, and troubleshooting of identity integrations and authentication flows.
Oversee testing, validation, and troubleshooting of identity integrations and authentication flows.Oversee testing, validation, and troubleshooting of identity integrations and authentication flows.Oversee testing, validation, and troubleshooting of identity integrations and authentication flows.
- Document identity architecture, standards, and migration strategies.
Document identity architecture, standards, and migration strategies.Document identity architecture, standards, and migration strategies.Document identity architecture, standards, and migration strategies.
- Act as the subject matter expert for identity services throughout the project lifecycle.
Act as the subject matter expert for identity services throughout the project lifecycle.Act as the subject matter expert for identity services throughout the project lifecycle.Act as the subject matter expert for identity services throughout the project lifecycle.RequiredRequired
RequiredRequired
- Strong knowledge of Microsoft Active Directory, DNS, DHCP, LDAP, Kerberos, and Group Policy
Strong knowledge of Microsoft Active Directory, DNS, DHCP, LDAP, Kerberos, and Group PolicyStrong knowledge of Microsoft Active Directory, DNS, DHCP, LDAP, Kerberos, and Group PolicyStrong knowledge of Microsoft Active Directory, DNS, DHCP, LDAP, Kerberos, and Group Policy
- Bachelor’s degree in Information Technology, Computer Science, or a related field (or equivalent experience).
Bachelor’s degree in Information Technology, Computer Science, or a related field (or equivalent experience).Bachelor’s degree in Information Technology, Computer Science, or a related field (or equivalent experience).Bachelor’s degree in Information Technology, Computer Science, or a related field (or equivalent experience).
- Proven experience as an Active Directory Architect, Identity Architect, or similar senior role.
Proven experience as an Active Directory Architect, Identity Architect, or similar senior role.Proven experience as an Active Directory Architect, Identity Architect, or similar senior role.Proven experience as an Active Directory Architect, Identity Architect, or similar senior role.
- Deep expertise in Active Directory, including domain services, group policy, DNS integration, and trust relationships.
Deep expertise in Active Directory, including domain services, group policy, DNS integration, and trust relationships.Deep expertise in Active Directory, including domain services, group policy, DNS integration, and trust relationships.Deep expertise in Active Directory, including domain services, group policy, DNS integration, and trust relationships.
- Strong knowledge of Entra ID and modern identity platforms.
Strong knowledge of Entra ID and modern identity platforms.Strong knowledge of Entra ID and modern identity platforms.Strong knowledge of Entra ID and modern identity platforms.
- Experience with hybrid identity solutions, including directory synchronization and federation.
Experience with hybrid identity solutions, including directory synchronization and federation.Experience with hybrid identity solutions, including directory synchronization and federation.Experience with hybrid identity solutions, including directory synchronization and federation.
- Solid understanding of authentication protocols (for example, Kerberos, LDAP, SAML, OAuth, OpenID Connect).
Solid understanding of authentication protocols (for example, Kerberos, LDAP, SAML, OAuth, OpenID Connect).Solid understanding of authentication protocols (for example, Kerberos, LDAP, SAML, OAuth, OpenID Connect).Solid understanding of authentication protocols (for example, Kerberos, LDAP, SAML, OAuth, OpenID Connect).
- Experience supporting or leading large-scale identity transformation or migration projects.
Experience supporting or leading large-scale identity transformation or migration projects.Experience supporting or leading large-scale identity transformation or migration projects.Experience supporting or leading large-scale identity transformation or migration projects.
- Strong analytical, troubleshooting, and communication skills
Strong analytical, troubleshooting, and communication skillsStrong analytical, troubleshooting, and communication skillsStrong analytical, troubleshooting, and communication skillsPreferredPreferred
PreferredPreferred
- Experience in enterprise-scale environments with multi-domain/multi-forest structures
Experience in enterprise-scale environments with multi-domain/multi-forest structuresExperience in enterprise-scale environments with multi-domain/multi-forest structuresExperience in enterprise-scale environments with multi-domain/multi-forest structures
- Exposure to cloud platforms (Azure, AWS) and integration with AD
Exposure to cloud platforms (Azure, AWS) and integration with ADExposure to cloud platforms (Azure, AWS) and integration with ADExposure to cloud platforms (Azure, AWS) and integration with AD
- Experience with Microsoft identity tools and services (for example, Entra Connect, Conditional Access, Identity Governance).
Experience with Microsoft identity tools and services (for example, Entra Connect, Conditional Access, Identity Governance).Experience with Microsoft identity tools and services (for example, Entra Connect, Conditional Access, Identity Governance).Experience with Microsoft identity tools and services (for example, Entra Connect, Conditional Access, Identity Governance).
- Knowledge of identity security best practices and Zero Trust principles.
Knowledge of identity security best practices and Zero Trust principles.Knowledge of identity security best practices and Zero Trust principles.Knowledge of identity security best practices and Zero Trust principles.
- Relevant certifications (for example, Microsoft Identity and Access Administrator, Azure Solutions Architect, or equivalent).
Relevant certifications (for example, Microsoft Identity and Access Administrator, Azure Solutions Architect, or equivalent).Relevant certifications (for example, Microsoft Identity and Access Administrator, Azure Solutions Architect, or equivalent).Relevant certifications (for example, Microsoft Identity and Access Administrator, Azure Solutions Architect, or equivalent).
- Experience in enterprise-scale or regulated environments.
Experience in enterprise-scale or regulated environments.Experience in enterprise-scale or regulated environments.Experience in enterprise-scale or regulated environments.PersonalPersonalPersonal
PersonalPersonalBesides the professional qualifications of the candidates, we place great importance in addition to various forms personality profile. These include:Besides the professional qualifications of the candidates, we place great importance in addition to various forms personality profile. These include:Besides the professional qualifications of the candidates, we place great importance in addition to various forms personality profile. These include:Besides the professional qualifications of the candidates, we place great importance in addition to various forms personality profile. These include:
High analytical skillsHigh analytical skillsHigh analytical skillsHigh analytical skillsHigh analytical skills
- A high degree of initiative and flexibility
A high degree of initiative and flexibilityA high degree of initiative and flexibilityA high degree of initiative and flexibilityA high degree of initiative and flexibilityA high degree of initiative and flexibility
- High customer orientation
High customer orientationHigh customer orientationHigh customer orientationHigh customer orientationHigh customer orientation
High quality awarenessHigh quality awarenessHigh quality awarenessHigh quality awarenessHigh quality awareness
- Excellent verbal and written communication skills
Excellent verbal and written communication skillsExcellent verbal and written communication skillsExcellent verbal and written communication skillsExcellent verbal and written communication skillsExcellent verbal and written communication skillsAbout InfosysAbout Infosys
About InfosysAbout InfosysAbout InfosysInfosys is a global leader in next-generation digital services and consulting. We enable clients in 46 countries to navigate their digital transformation. With over three decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through the many next of their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise and ideas from our innovation ecosystem.Infosys is a global leader in next-generation digital services and consulting. We enable clients in 46 countries to navigate their digital transformation. With over three decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through the many next of their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise and ideas from our innovation ecosystem.Infosys is a global leader in next-generation digital services and consulting. We enable clients in 46 countries to navigate their digital transformation. With over three decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through the many next of their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise and ideas from our innovation ecosystem.Infosys is a global leader in next-generation digital services and consulting. We enable clients in 46 countries to navigate their digital transformation. With over three decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through the many next of their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise and ideas from our innovation ecosystem.Visit www.infosys.com to see how Infosys can help your enterprise navigate your next.Visit www.infosys.com to see how Infosys can help your enterprise navigate your next.Visit www.infosys.com to see how Infosys can help your enterprise navigate your next.Visit www.infosys.com to see how Infosys can help your enterprise navigate your next.All aspects of employment at Infosys are based on merit, competence and performance. We are committed to embracing diversity and creating an inclusive environment for all employees. Infosys is proud to be an equal opportunity employerAll aspects of employment at Infosys are based on merit, competence and performance. We are committed to embracing diversity and creating an inclusive environment for all employees. Infosys is proud to be an equal opportunity employerAll aspects of employment at Infosys are based on merit, competence and performance. We are committed to embracing diversity and creating an inclusive environment for all employees. Infosys is proud to be an equal opportunity employerAll aspects of employment at Infosys are based on merit, competence and performance. We are committed to embracing diversity and creating an inclusive environment for all employees. Infosys is proud to be an equal opportunity employer
All aspects of employment at Infosys are based on merit, competence and performance. We are committed to embracing diversity and creating an inclusive environment for all employees. Infosys is proud to be an equal opportunity employer