Sr. Active Directory Engineer

Sr. Active Directory Engineer

Duration is 10 weeks at 40 hours a week

100% remote

Client has Active Directory issues they need to address - provisioning, access, identity, processes, account standards, etc. LCMC Health needs a partner to help them with best practices keeping governance and security in mind. They are a hybrid environment and replicate to Entra ID. They have decent structure with their domain controller. They need help with standards for provisioning, automation, governance, and how that all plays into Purview. Our client operates a hybrid Active Directory and Entra ID environment that includes 322 Group Policy Objects (GPO), approximately 37,340 user accounts, 14,475 groups, and

around 23,630 Windows client devices. The infrastructure contains ~ 1,800 Windows and Linux servers, an estimated 250 server-based applications, and support from 40 50 application SMEs. The environment is hybrid with replication and synchronization to Entra ID, supported by a domain controller structure.

Activities Include:

• Assess current-state identity, access, and device governance across AD and Entra ID.
• Rationalize and standardize identity constructs (user/service account standards, group taxonomy, OU design patterns, GPO strategy).
• Establish a pragmatic GPO clean-up and configuration baseline.
• Evaluate governed provisioning and automation patterns (HR-driven provisioning, group-based assignment, access packages) and Privileged Identity Management