AD Remediation & Resilience Associate Manager

Key Responsibilities:

As a member of Avanade’s security practice, you will be in a unique position to work for both Avanade and Accenture clients, ranging in size from medium to large global enterprise clients. You will have the opportunity to contribute to the entire Avanade organization by being a collaborative and knowledge-sharing individual, with the real opportunity to help shape the global Avanade security offerings as well as demonstrating your thought-leadership by producing blogs and articles for your region and for Avanade.com. We actively encourage and provide opportunities to undertake innovation, training, and development to ensure you are always at the cutting-edge Microsoft Security technology and our vendor solutions. This is a fantastic opportunity to establish yourself as a leader in this space. You will learn how to deliver and solution large projects, as well as gain the knowledge and experience of Microsoft’s broader Security, Compliance, and Identity (SCI) ecosystem, which is already recognized as a world-leading integrated security platform. You will work with Avanade customers to design and implement Zero Trust architectures using Microsoft security solutions. You will also lead the deployment and configuration of: Conduct AD hardening and remediation assessments, including vulnerability identification, configuration reviews, GPO analysis, delegation mapping, PKI review, encryption settings, and domain/forest functional level validation. Implement hardening measures aligned to Microsoft best practices and tiered access models, reducing attack surface and elevating AD security posture. Improve detection capability through integration and optimisation of Microsoft Defender for Identity to support early threat identification. Define remediation plans based on assessment outcomes, covering AD cleanup, secure configuration baselines, trust optimisation, domain consolidation, and legacy technology uplift where feasible. Support execution of remediation activities, including architecture where required, GPO restructuring, privileged access segregation, and strengthening of administrative boundary controls. Design and support delivery of AD recovery and take back processes, ensuring organisations can respond effectively to cyber-attacks (e.g., ransomware) and restore critical identity services. Lead or assist in testing recovery runbooks, validating failover procedures, and documenting repeatable, auditable operational processes. Conduct structured AD security and resilience assessments, gathering evidence, analysing risk, and producing actionable reports. Define AD resilience strategies, phased implementation programmes, and roadmap recommendations for multi-domain/multi forest environments. Present findings, remediation plans, and recovery strategies Facilitate workshops covering AD architecture, operational processes, and resilience maturity improvement. Operate as a trusted advisor to guide clients through identity security uplift and cyber resilience programmes.

• Conduct AD hardening and remediation assessments, including vulnerability identification, configuration reviews, GPO analysis, delegation mapping, PKI review, encryption settings, and domain/forest functional level validation.
• Implement hardening measures aligned to Microsoft best practices and tiered access models, reducing attack surface and elevating AD security posture.
• Improve detection capability through integration and optimisation of Microsoft Defender for Identity to support early threat identification.
• Define remediation plans based on assessment outcomes, covering AD cleanup, secure configuration baselines, trust optimisation, domain consolidation, and legacy technology uplift where feasible.
• Support execution of remediation activities, including architecture where required, GPO restructuring, privileged access segregation, and strengthening of administrative boundary controls.
• Design and support delivery of AD recovery and take back processes, ensuring organisations can respond effectively to cyber-attacks (e.g., ransomware) and restore critical identity services.
• Lead or assist in testing recovery runbooks, validating failover procedures, and documenting repeatable, auditable operational processes.
• Conduct structured AD security and resilience assessments, gathering evidence, analysing risk, and producing actionable reports.
• Define AD resilience strategies, phased implementation programmes, and roadmap recommendations for multi-domain/multi forest environments.
• Present findings, remediation plans, and recovery strategies to technical and executive stakeholders.
• Facilitate workshops covering AD architecture, operational processes, and resilience maturity improvement.
• Operate as a trusted advisor to guide clients through identity security uplift and cyber resilience programmes.

Equal Employment Opportunity Statement

All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.

Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process.

Avanade is committed to providing veteran employment opportunities to our service men and women.

Please read Avanade\’s Hiring and Privacy Statement for more information on how we process your data during the Recruiting and Hiring process.