AD / Identity Engineer

Identity Engineer
3 months contract
Melbourne based
Hybrid

Green Light is seeking an experienced Identity Engineer to lead and support a large-scale identity modernization initiative focused on the migration from on-premises Active Directory (AD) to Microsoft Entra ID. This role requires hands-on expertise in hybrid identity environments, legacy authentication remediation, Active Directory decommissioning, and endpoint management transformation through Microsoft Intune.

The successful candidate will have a proven track record of delivering production identity transformation projects and will possess deep technical knowledge across Microsoft identity technologies, authentication protocols, and enterprise infrastructure.
Key Responsibilities

Identity Modernisation

• Lead the migration of on-premises Active Directory environments to Microsoft Entra ID.
• Design and implement hybrid identity solutions leveraging Microsoft Entra Connect and related technologies.
• Plan and execute the decommissioning of legacy Active Directory forests, domains, domain controllers, and associated infrastructure.
• Support identity consolidation, modernization, and cloud-first authentication strategies.

Active Directory Decommissioning

• Assess existing Active Directory environments and identify dependencies preventing decommissioning.
• Develop and execute phased AD retirement plans across multi-site and multi-domain controller environments.
• Validate migration readiness and ensure operational stability throughout transition activities.
• Manage application, service account, DNS, certificate, and authentication dependencies

Endpoint & Policy Transformation

• Assess existing Group Policy Objects (GPOs) and map equivalent controls within Microsoft Intune.
• Design and implement policy migration strategies from Group Policy to Intune.
• Support modern workplace initiatives including Entra ID joined and hybrid-joined devices.
• Collaborate with endpoint engineering teams on device management modernization.

Security & Governance

• Implement identity security best practices aligned with Zero Trust principles.
• Support Conditional Access, MFA, privileged access, and identity protection initiatives.
• Maintain compliance with security, governance, and operational standards.
• Produce technical documentation, migration runbooks, and operational support materials.

Required Experience

• Proven experience delivering Active Directory to Microsoft Entra ID migration projects in enterprise environments.
• Demonstrated experience successfully decommissioning a production Active Directory forest.
• Strong expertise in:
  • Active Directory Domain Services
  • Microsoft Entra ID
  • Microsoft Entra Connect / Cloud Sync
  • Hybrid identity architecture
• Experience migrating or replacing Group Policy Objects (GPOs) with Microsoft Intune policies.
• Experience working within complex multi-site, multi-domain-controller Active Directory environments.
• Strong troubleshooting and root-cause analysis capabilities.

About the company
We are an Australian onshore services company that provides technology capability across and Asia. Our services range from day-to-day operational activities, through project delivery, to more strategic and transformational programs. At Green Light, we are committed to creating a diverse and inclusive workplace where everyone feels valued and respected. We are proud to be an equal opportunity employer and do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
 
We encourage applications from all backgrounds and communities, and we are dedicated to providing a fair and accessible recruitment process for all candidates. During the recruitment process, if you require any accommodations or modifications please reach out to [email protected] or call +61 9247 3799.

Apply Now! For more information, contact Shilpa on [+ 61 482 072 637](tel:+ 61 482 072 637) or email shilpac@greenlightworldwide.com .