Associate, Cyber Risk

We are seeking an Engineer/Associate- Active Directory & Microsoft Entra ID who is responsible for supporting enterprise Identity & Access Management operations and projects across Active Directory, Microsoft Entra ID, identity synchronization, authentication services, and directory migration initiatives.

This role participates in directory transformation programs, supports migration activities, and ensures secure and reliable identity services across hybrid environments.

Day to day responsibilities

• Manage and support Active Directory environments including users, groups, organizational units, GPOs, and domain services
• Perform user lifecycle management activities including provisioning, modifications, and deprovisioning
• Troubleshoot Active Directory authentication, replication, DNS, and directory-related issues
• Support Active Directory health monitoring, maintenance, and operational activities
• Assist in implementing and maintaining Active Directory security best practices

• Support Microsoft Entra ID administration activities across hybrid and cloud environments
• Manage users, groups, licenses, role assignments, and administrative units
• Configure and support Microsoft Entra Connect synchronization services
• Support Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Conditional Access implementations
• Assist with identity lifecycle management and application integrations within Microsoft Entra ID

• Participate in Active Directory consolidation and migration projects
• Support user, group, computer, and service account migration activities
• Assist with Microsoft Entra ID tenant migration and coexistence activities
• Execute migration runbooks, validation testing, and post-migration support tasks
• Perform migration analysis, troubleshooting, and issue resolution during project execution

• Support federation, authentication, and identity synchronization services
• Assist with implementation of security controls across AD and Entra ID environments
• Support Conditional Access, MFA, Identity Protection, and password management initiatives
• Participate in access reviews and identity governance processes
• Ensure compliance with enterprise security and operational standards

• Provide L2/L3 support for Active Directory and Microsoft Entra ID services
• Investigate and resolve incidents, service requests, and operational issues
• Maintain technical documentation, operational procedures, and migration runbooks
• Work closely with infrastructure, security, and application teams
• Participate in project planning, testing, and deployment activities

Essential traits

• 3-5 years of experience supporting Active Directory and Microsoft Entra ID environments
• Strong hands-on experience with Active Directory Domain Services (AD DS)
• Strong experience with Microsoft Entra ID administration and identity management
• Experience with Microsoft Entra Connect and hybrid identity environments
• Hands-on experience supporting Active Directory migration projects
• Experience with Microsoft Entra ID migration, tenant-to-tenant migrations, or coexistence scenarios
• Experience configuring SSO, MFA, Conditional Access, and authentication services
• Strong troubleshooting skills across directory, authentication, and identity synchronization platforms

• DNS, DHCP, LDAP, Kerberos, and Group Policy
• Identity synchronization and federation concepts
• Authentication protocols including SAML, OAuth 2.0, and OpenID Connect
• PowerShell scripting and automation
• Windows Server administration and hybrid identity architecture

• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or equivalent practical experience
• Experience working on enterprise Active Directory migration or transformation projects
• Experience supporting hybrid identity environments integrating Active Directory and Microsoft Entra ID
• Experience with cloud platforms, preferably Microsoft Azure
• Strong understanding of identity security principles and access management controls
• Microsoft certifications such as SC-300, AZ-104 or equivalent are preferred

In order to be considered for a position, you must formally apply via careers.kroll.com.

Kroll is committed to equal opportunity and diversity, and recruits people based on merit.

#LI-Hybrid

#LI-SP1