Position Overview
We are seeking an expert-level Active Directory / Quest Migration Engineer to plan, execute, and optimize Active Directory operations in a large-scale, mission-critical environment.
This engineer will serve as the primary subject-matter expert for Quest migration tools and oversee ongoing migrations involving more than 35,000 workstations, along with servers, applications, users, and other directory objects. The position requires extensive experience with on-premises Active Directory, domain consolidation, hybrid identity, Microsoft Entra ID, PowerShell automation, and Active Directory security.
Key Responsibilities
Plan, execute, and optimize on-premises Active Directory operations.
Design, deploy, administer, and support domain controllers, domains, forests, trusts, Sites and Services, and Group Policy Objects.
Serve as the primary subject-matter expert for Quest migration tools.
Oversee ongoing domain migrations involving more than 35,000 workstations, as well as server and application transitions.
Migrate legacy domains into a consolidated, modern Active Directory structure.
Address stalled migration initiatives through automation, process improvements, and Active Directory best practices.
Manage hybrid Active Directory configurations and synchronization between on-premises AD and Microsoft Entra ID using Azure AD Connect.
Support identity federation, Conditional Access policies, Pass-through Authentication, single sign-on, and cloud identity management.
Support cloud integration for an environment in which approximately 20% of workloads are cloud-native.
Troubleshoot complex Active Directory issues, including replication failures, DFS-R/SYSVOL, DNS integration, schema extensions, Certificate Services, and performance problems.
Identify and remediate Active Directory security vulnerabilities, including issues involving Kerberos and LDAP hardening.
Support the integration of legacy domains associated with merger and acquisition activity.
Develop and maintain PowerShell scripts for Active Directory administration, querying, reporting, and bulk operations.
Develop automation for AD health monitoring, backup and recovery, compliance, and migration operations.
Use ADDS, DataDog, or other third-party tools to support monitoring and operational visibility.
Collaborate with security, application, networking, and infrastructure teams to assess migration dependencies.
Identify and mitigate technical risks while minimizing downtime during critical migration activities.
Implement Active Directory security best practices, including least privilege, auditing, compliance, and Privileged Access Management.
Evaluate tools and technologies that support Active Directory and hybrid identity environments.
Create technical roadmaps for domain consolidation and hybrid expansion.
Provide regular project and migration updates to leadership.
Guide technical teams, mentor peers, and influence engineering decisions without direct managerial authority.
Required Qualifications
Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent professional experience.
At least 7 years of hands-on experience with on-premises Active Directory.
At least 3 years of experience in engineering.
At least 2 years of experience supporting hybrid Active Directory and Microsoft Entra ID environments.
Deep expertise in Active Directory architecture, including:
Multi-domain and multi-forest environments
Domain and forest trusts
Domain controllers
Active Directory Sites and Services
Schema modifications
Organizational Unit design
Replication topology
Strong understanding of Quest migration tools and the ability to serve as the primary Quest migration expert.
Proven experience completing large-scale Active Directory migrations using tools such as:
Quest Migration Manager
Active Directory Migration Tool
PowerShell
Experience migrating users and Active Directory objects at scale.
Experience with domain consolidation and SIDHistory preservation.
Experience overseeing workstation, server, and application transitions between legacy and target domains.
Extensive experience troubleshooting:
Active Directory replication
DFS-R and SYSVOL
DNS integration
AD Certificate Services and PKI
Group Policy processing
Authentication and performance issues
Strong Group Policy experience, including inheritance, filtering, deployment, and troubleshooting in complex environments.
Strong knowledge of hybrid identity and cloud identity management, including:
Microsoft Entra ID
Azure AD Connect
Pass-through Authentication
Single sign-on
Conditional Access
Entra ID governance
Strong PowerShell scripting skills for Active Directory administration, bulk operations, automation, and queries such as Get-ADUser and Get-ADComputer.
Strong knowledge of Active Directory security, including least privilege, auditing, privileged access, and compliance with NIST or CIS benchmarks.
Strong systems and server engineering experience.
Excellent troubleshooting and problem-solving skills in large-scale, high-pressure, mission-critical environments.
Experience guiding technical projects, mentoring engineers, and influencing technical decisions.
Preferred Qualifications
Experience with Python.
Experience with Microsoft Azure infrastructure.
Experience supporting cloud environments.
Experience with Windows Server 2016 or newer.
Experience with Microsoft Intune for endpoint management.
Experience with Active Directory monitoring or administration tools such as SolarWinds, ManageEngine, or DataDog.
Security and compliance experience.
Microsoft Certified: Identity and Access Administrator Associate.
MCSE: Productivity or an equivalent certification.
Core Technical Skills
Active Directory
Quest Migration Manager
ADMT
PowerShell
Microsoft Entra ID
Azure AD Connect
Domain and forest migrations
Domain consolidation
SIDHistory
Group Policy
Windows Server
DNS
DFS-R and SYSVOL
AD Certificate Services and PKI
Kerberos
LDAP
Conditional Access
SSO
Privileged Access Management
Python
Azure
Security
Cloud infrastructure
Job Type & Location
This is a Contract to Hire position based out of Houston, TX.
Pay and Benefits
The pay range for this position is $70.00 - $83.00/hr.
Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: - Medical, dental & vision - Critical Illness, Accident, and Hospital - 401(k) Retirement Plan - Pre-tax and Roth post-tax contributions available - Life Insurance (Voluntary Life & AD&D for the employee and dependents) - Short and long-term disability - Health Spending Account (HSA) - Transportation benefits - Employee Assistance Program - Time Off/Leave (PTO, Vacation or Sick Leave)
Workplace Type
This is a hybrid position in Houston,TX.
Application Deadline
This position is anticipated to close on Sep 22, 2026.
About TEKsystems
We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.
The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
About TEKsystems and TEKsystems Global Services
We're a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We're a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We're strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. We're building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.
The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.
Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.
