Sr Active Directory Engineer to support AD / Entra ID migration for divestiture (M&A) initiative

Duration: until EOY

Location: Brampton - 3 days on site

Work Hours: 8 hours/day

Our client, Canada’s largest retailer, is seeking a Sr Active Directory Engineer to support a large-scale AD and Entra ID migration tied to a divestiture initiative.

This role will focus on separating and migrating users into a new environment (“island”), ensuring identity, access, and policies are correctly transitioned to support future tenant separation.

You will work closely with engineering and infrastructure teams in a hands-on migration-focused role, supporting a high-volume, time-sensitive initiative.

• Support Active Directory and Entra ID migration activities as part of a divestiture initiative
• Design and execute user, group, and access migrations into a new isolated environment
• Configure and manage Conditional Access, identity policies, and access controls
• Work with engineering teams to ensure secure and accurate identity transitions
• Troubleshoot and resolve identity and access issues during migration
• Support planning and execution across multiple phases of tenant separation

• 7+ years of Active Directory engineering experience (on-prem)
• Strong experience with Microsoft Entra ID (Azure AD) including Conditional Access
• Proven experience supporting AD / Entra ID migrations (M&A, divestiture, or tenant separation)
• Strong understanding of identity, access management, and security best practices
• Experience working in enterprise environments with complex identity structures

• Scripting experience (PowerShell) for automation of identity tasks
• Experience supporting divestiture or tenant carve-out initiatives
• Relevant certifications, such as:
• Microsoft Certified: Identity and Access Administrator Associate
• CyberArk Defender or Sentry
• Windows Server Hybrid Administrator Associate