Senior Active Directory Assessment Specialist (Remote)

Senior Assessment Specialist (Active Directory Architect)

Client: US-based Location: Fully Remote (Working US Business Hours)

Type: Contract, 6 months (Through the end of 2026, with a likely extension into 2027)

Hours: Average of 40 hours per week (with flexibility throughout the project)

Pay: Competitive

Role Type: C2H

JOB SUMMARY

Lead multi-forest Active Directory assessments and modernization as our Senior Assessment Specialist. Conduct eight-dimension discovery of forests, domain controllers, FSMO roles, Group Policy Objects, trusts, ADCS, and Entra Connect. Plan FSMO transfers, legacy domain controller replacement runbooks, and target-state designs including ADMT migrations and Entra Connect topologies. Author migration quotes and provide on-call support during implementations. This key role drives critical infrastructure changes and fosters growth in hybrid identity expertise on a supportive remote team.

RESPONSIBILITIES

• Lead the embedded Active Directory assessment of complex multi-forest environments including six forests, 93 domain controllers with several on unsupported operating systems, 141 sites, 28 trusts, and over 426 Group Policy Objects while delivering a detailed Modernization Assessment.
• Execute the eight-dimension discovery process encompassing forests and domains, sites subnets and replication, domain controllers and FSMO roles, trusts, Group Policy Objects, identity services such as ADCS Entra Connect and federation, privileged access management, and operational hygiene.
• Sequence FSMO transfer and seizure plans for forests where Forest or Domain level FSMO roles reside on unsupported OS domain controllers like Windows Server 2008 R2 and 2012 R2.
• Define the legacy domain controller replacement order and author comprehensive runbooks for replacing up to 13 end-of-support domain controllers.
• Design the target state architecture featuring forest consolidation roadmaps, ADMT batch migration plans, Entra Connect topology, ADCS rationalization, and trust simplification strategies.
• Prepare scoped Migration Quotes and follow-on Statements of Work including detailed effort estimates, project duration, and risk registers.
• Remain available on-call during legacy domain controller replacement waves and End of Support attestation processes to ensure seamless operations and quick issue resolution.

QUALIFICATIONS

• 15+ years enterprise Active Directory experience required.
• Bachelor's degree in Computer Science or equivalent experience.
• Expert-level skills in multi-forest Active Directory, FSMO, and Entra Connect.
• Experience with ADMT batch migrations and legacy domain controller replacements.
• Knowledge of ADCS, Kerberos, ADFS federation, and hybrid identity solutions.
• Excellent technical writing skills with ability to produce detailed assessments.

📥 TO APPLY

If you meet the requirements and are ready for a challenging greenfield initiative, please apply directly through LinkedIn or email your updated CV to Sharath_ss@trigent.com.