Title: Azure Active Director Consultant
Employment type : W2
Location: McKinney, TX
Duration: 6+ Months
Interview: Video
This position requires hands-on Directory Services experience to manage day-to-day Directory Services requests and support Directory Services security findings across both on-premises Active Directory (AD) and Microsoft Entra ID.
We are seeking an experienced contractor with strong Directory Services expertise to support Active Directory (AD) and Microsoft Entra ID engineering and operations. The resource should be capable of handling engineering and operational support, implementing approved security changes, validating findings, supporting testing and production rollout, and working across Infrastructure, Messaging, Endpoint, and Security teams. The role also requires experience with Entra ID, Conditional Access, PIM, Group Policy, PowerShell, and PAM tools such as Delinea or CyberArk.
Key Responsibilities :
The contractor will:
Review and address Active Directory findings across user accounts, computer accounts, privileged access, delegation, trusts, Group Policy, Tier 0 assets, and domain controller security
Review and address Microsoft Entra ID and Microsoft 365 findings across Conditional Access, MFA, privileged roles, PIM, diagnostic logging, enterprise applications, stale accounts, and tenant security settings
Assess and update configurations related to inbound, outbound, and bidirectional trusts
Identify and clean up inactive enabled user and computer accounts
Review and optimize membership in privileged Active Directory groups
Review domain- and OU-level delegations and adjust access where required
Strengthen security controls for Entra Connect and hybrid identity components
Enhance Conditional Access policies, including MFA enforcement, privileged account protections, device-based controls, and session policies
Address risks related to privileged accounts, including MFA gaps, stale accounts, and synchronized identities
Configure or support Entra ID logging and integration with monitoring tools
Test changes in non-production environments and support production deployment
Provide documentation, implementation evidence, and status updates
Support ServiceNow tickets related to Directory Services
Work with PAM tools such as Delinea or CyberArk, where applicable
Required Experience :
Strong Directory Services experience, including Active Directory administration and support
Hands-on experience with Entra ID, Conditional Access, PIM, Group Policy, and PowerShell
Experience handling identity and access security improvements in enterprise environments
Experience with PAM tools such as Delinea or CyberArk
Deliverables :
Support for ServiceNow tickets related to Directory Services
Prioritized action plan
Implemented technical changes
Testing and validation results
Production rollout support
Documentation and knowledge transfer