We are seeking an Engineer/Associate- Active Directory & Microsoft Entra ID who is responsible for supporting enterprise Identity & Access Management operations and projects across Active Directory, Microsoft Entra ID, identity synchronization, authentication services, and directory migration initiatives. This role participates in directory transformation programs, supports migration activities, and ensures secure and reliable identity services across hybrid environments.
Day to day responsibilities
Active Directory Administration
- Manage and support Active Directory environments including users, groups, organizational units, GPOs, and domain services
- Perform user lifecycle management activities including provisioning, modifications, and deprovisioning
- Troubleshoot Active Directory authentication, replication, DNS, and directory-related issues
- Support Active Directory health monitoring, maintenance, and operational activities
- Assist in implementing and maintaining Active Directory security best practices
Microsoft Entra ID Administration
- Support Microsoft Entra ID administration activities across hybrid and cloud environments
- Manage users, groups, licenses, role assignments, and administrative units
- Configure and support Microsoft Entra Connect synchronization services
- Support Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Conditional Access implementations
- Assist with identity lifecycle management and application integrations within Microsoft Entra ID
AD & Entra Migration Projects
- Participate in Active Directory consolidation and migration projects
- Support user, group, computer, and service account migration activities
- Assist with Microsoft Entra ID tenant migration and coexistence activities
- Execute migration runbooks, validation testing, and post-migration support tasks
- Perform migration analysis, troubleshooting, and issue resolution during project execution
Identity Services & Security
- Support federation, authentication, and identity synchronization services
- Assist with implementation of security controls across AD and Entra ID environments
- Support Conditional Access, MFA, Identity Protection, and password management initiatives
- Participate in access reviews and identity governance processes
- Ensure compliance with enterprise security and operational standards
Operations & Support
- Provide L2/L3 support for Active Directory and Microsoft Entra ID services
- Investigate and resolve incidents, service requests, and operational issues
- Maintain technical documentation, operational procedures, and migration runbooks
- Work closely with infrastructure, security, and application teams
- Participate in project planning, testing, and deployment activities
Essential traits
Core Technical Skills
- 3-5 years of experience supporting Active Directory and Microsoft Entra ID environments
- Strong hands-on experience with Active Directory Domain Services (AD DS)
- Strong experience with Microsoft Entra ID administration and identity management
- Experience with Microsoft Entra Connect and hybrid identity environments
- Hands-on experience supporting Active Directory migration projects
- Experience with Microsoft Entra ID migration, tenant-to-tenant migrations, or coexistence scenarios
- Experience configuring SSO, MFA, Conditional Access, and authentication services
- Strong troubleshooting skills across directory, authentication, and identity synchronization platforms
Technical Foundations
- Active Directory Domain Services (AD DS)
- Microsoft Entra ID
- Entra Connect / Azure AD Connect
- DNS, DHCP, LDAP, Kerberos, and Group Policy
- Identity synchronization and federation concepts
- Authentication protocols including SAML, OAuth 2.0, and OpenID Connect
- PowerShell scripting and automation
- Windows Server administration and hybrid identity architecture
Prerequisites
- Bachelor's degree in Computer Science, Information Technology, Cyber Security, or equivalent practical experience
- Experience working on enterprise Active Directory migration or transformation projects
- Experience supporting hybrid identity environments integrating Active Directory and Microsoft Entra ID
- Experience with cloud platforms, preferably Microsoft Azure
- Strong understanding of identity security principles and access management controls
- Microsoft certifications such as SC-300, AZ-104 or equivalent are preferred
In order to be considered for a position, you must formally apply via careers.kroll.com.
Kroll is committed to equal opportunity and diversity, and recruits people based on merit.
#LI-Hybrid
#LI-SP1
Skills Required
- 3-5 years of experience supporting Active Directory and Microsoft Entra ID environments
- Hands-on experience with Active Directory Domain Services
- Experience administering Microsoft Entra ID and identity management
- Experience with Microsoft Entra Connect and hybrid identity environments
- Hands-on experience supporting Active Directory migration projects
- Experience with Microsoft Entra ID migration, tenant-to-tenant migrations, or coexistence scenarios
- Experience configuring SSO, MFA, Conditional Access, and authentication services
- Strong troubleshooting skills across directory, authentication, and identity synchronization platforms
- Bachelor's degree in Computer Science, Information Technology, Cyber Security, or equivalent practical experience
- Experience working on enterprise Active Directory migration or transformation projects
- Experience supporting hybrid identity environments integrating Active Directory and Microsoft Entra ID
- Experience with cloud platforms, preferably Microsoft Azure
- Strong understanding of identity security principles and access management controls
- Microsoft certifications such as SC-300, AZ-104, or equivalent
Kroll Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Kroll and has not been reviewed or approved by Kroll.
-
Healthcare Strength — Medical, dental, and vision coverage with HSA/FSA options are part of the U.S. package, alongside life and AD&D. Breadth across core health benefits is positioned as competitive for a large advisory firm.
-
Retirement Support — A 401(k) plan with company match is a core element of the package. Retirement support is consistently highlighted as competitive within total rewards.
-
Leave & Time Off Breadth — Paid holidays, sick leave, and PTO are included, with generous time off and parental/family leave for U.S. roles. Some roles also offer hybrid/WFH flexibility that complements time-off usability.
Kroll Insights
What We Do
Kroll is the world’s premier provider of services and digital products related to valuation, governance, risk and transparency. We work with clients across diverse sectors in the areas of valuation, expert services, investigations, cyber security, corporate finance, restructuring, legal and business solutions, data analytics and regulatory compliance. Our firm has nearly 5,000 professionals in 30 countries and territories around the world. For more information, visit www.kroll.com.
.png){kind=logo}
