Security Consultant - AD

**Introduction** A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences. **Your role and responsibilities** * Administration and support of Active Directory (AD DS) including users, groups, OUs, and computer objects * Domain Controller upgrades, patching, and lifecycle management * Troubleshooting Domain Controller replication, authentication, and DNS-related issues * Designing and managing Group Policy Objects (GPOs) for security and operational requirements * LDAP and LDAPs troubleshooting DNS * Administration and troubleshooting of DNS services in Windows environments * Managing forwarders, conditional forwarders, and name resolution issues Azure & Identity Management * Administration of Azure Active Directory (Entra ID) * Managing Azure AD Connect (sync, troubleshooting, upgrades, monitoring) * Azure application creation, registration, and integration * Implementing and supporting SSO (SAML, OAuth, OpenID Connect) for enterprise applications Security & Compliance * Perform Vulnerability Assessment (VA) remediation and closure related to AD, DNS, and identity services * Implement identity security best practices and hardening standards * Support audits, compliance checks, and security reviews Operations & Support * Handling incident, problem, and change management activities * Root cause analysis and documentation for critical identity-related issues * Collaborating with application, security, and infrastructure teams **Required technical and professional expertise** * Experience configuring Domain Controllers, Creating Domains Forests. * Managing users and groups, assigning rights / permissions. * Upgradation of Domain Controller from Windows Server 2003 to Windows Server 2022. * Migration from FRS to DFSR. * FSMO role transfer. **Preferred technical and professional experience** * Good Communication Skills * Ready to work in shifts IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.