Active Directory Migration Subject Matter Expert - Identity Management

Job Title :

Active Directory Migration Engineer

About the Role :

We are seeking an experienced engineer to lead and execute complex Active Directory (AD) migrations and coexistence projects during M&A transitions. The role will own endtoend assessment, pilot migrations, cutover planning, and postmigration validation, ensuring seamless identity and access continuity for the business.

Key Responsibilities :

- Migration Assessment : Analyze users, groups, devices, servers, service accounts, applications, trusts, DNS, and authentication dependencies across source and target AD environments.

- Migration Execution : Run pilot migrations and subsequent waves for identities and devices, handling SIDHistory, SPNs, GPOs, DNS, trusts, and access validation.

- Coexistence & Cutover : Enable Day1 readiness, manage crossdomain access, execute cutover and rollback procedures, resolve issues, and maintain business continuity throughout the M&A transition.

- Validation & Handover : Conduct postmigration validation, remediate defects, update runbooks, support legacydomain decommissioning, and hand over stable environments to operations.

Technologies :

- Active Directory, Entra ID, Entra Connect, DNS, DHCP, GPO, PKI, ADFS, PowerShell, ADMT/Quest Migration Manager, CyberArk/PAM

Required Skills :

- Deep expertise in Active Directory design, administration, and migration methodologies.

- Strong knowledge of identity federation (ADFS), Azure Entra services, and privileged access management (CyberArk/PAM).

- Proficiency with PowerShell scripting for automation and troubleshooting.

- Experience with migration tools such as ADMT and Quest Migration Manager.

- Ability to assess and map complex trust, DNS, and authentication dependencies.

Preferred Experience :

- Prior involvement in largescale AD migrations supporting M&A or divestiture initiatives.

- Handson experience with coexistence scenarios and cutover planning.

- Familiarity with Windows Server networking services (DHCP, DNS) and PKI infrastructure.

Qualifications :

- Relevant technical certifications (e.g., Microsoft Certified: Identity and Access Administrator, Azure AD) are a plus but not mandatory.

Recruiter Summary :

- Lead endtoend Active Directory migrations for M&A projects.

- Assess and map users, groups, devices, trusts, DNS, and authentication dependencies.

- Execute pilot and wave migrations, handling SIDHistory, SPNs, GPOs, and access validation.

- Manage Day1 readiness, crossdomain access, cutover, rollback, and business continuity.

- Perform postmigration validation, defect remediation, runbook updates, and legacy domain decommissioning.