Position Summary Contractor Work you'll do We’re looking for an experienced IAM / Active Directory Engineer to build and support secure, reliable Active Directory environments in AWS. You’ll work across AWS Managed Microsoft AD and customer-managed AD, develop operational standards, and help resolve client issues. Roles And Responsibilities Design, deploy, and test Active Directory environments in AWS—both AWS Managed Microsoft AD and customer-managed deployments. Manage and support development AD environments hosted in AWS. Create practical standards and documentation for AD deployment and operations, covering: Delegated administration and entitlement management, Automation workflow integration, SIEM and event-collection integration, Required security tooling Design and document AD backup and recovery procedures. Troubleshoot client issues involving AWS-hosted AD, authentication, and connectivity. Produce clear technical documentation and communicate findings to technical and business stakeholders. Required Qualification Strong experience administering Active Directory, including Group Policy, LDAP, Kerberos and NTLM, OU design, and user and group management. Experience with AD backup and recovery. Hands-on familiarity with AWS cloud management concepts. Experience with AWS Managed Microsoft AD and customer-managed Active Directory hosted in AWS. Working knowledge of DNS and VLANs. Understanding of event collection and monitoring options. Strong troubleshooting, communication, and technical writing skills. The expected pay range for this contract assignment is $65-$70 per hour. The exact pay rate will vary based on skills, experience, and location and will be determined by the third-party whose employees provide services to Deloitte. Candidates interested in applying for this opportunity must be geographically based in the United States and must be legally authorized to work in the United States without the need for employer sponsorship. We do not accept agency resumes and are not responsible for any fees related to unsolicited resumes. Deloitte is not the employer for this role. This work is contracted through a third-party whose employees provide services to Deloitte. #Remote Expected Work Schedule Approximate hours per week About Deloitte Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It makes Deloitte one of the most rewarding places to work. As used in this posting, “Deloitte” means , a subsidiary of Deloitte LLP. Please see www.deloitte.com/us/about for a detailed description of the legal structure of Deloitte LLP and its subsidiaries. Requisition code: 373123