Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 2 days ago

Senior Active Directory Engineer – Mergers, Acquisitions & Divestitures

Innomar Strategies872 open roles

Where
Conshohocken PA
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Active Directory Engineer – Mergers, Acquisitions & DivestituresInnomar Strategies · Conshohocken PA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Innomar Strategies's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.7% of postings close within 7 days. Measured by our own scanner across the market. Innomar Strategies postings stay open a median of 27 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.5%3 days
  3. 12.7%7 days
  4. 20.4%14 days
  5. 35.6%30 days
  6. 58.7%60 days
This job: posted 2 days ago

Innomar Strategies median: 27 days open

The posting

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!

Job Details

About the Role

We are looking for a Senior Active Directory Engineer to design and build the identity workstreams of our acquisition activity. You will assess newly acquired environments, then design and execute the migration, consolidation, and coexistence of directory environments across multiple forests, making sure that every connection between two organizations is secure, auditable, and reversible. Including similar tasks for divestitures.

This is a hands-on role. You will work with IT leadership, Security, Legal, and the Integration Management Office to deliver Day-1 readiness and long-term identity consolidation, often on compressed timelines.

Key Responsibilities

Acquisition Identity Integration

  • Perform pre-close and post-close discovery and assessment of acquired environments: forest and domain structure, trusts, GPOs, schema state, DNS, PKI, service accounts, privileged access, and technical debt.
  • Design the path to consolidate acquired forests into a target forest, including temporary coexistence (trusts, federation) needed to bridge Day-1 until migration is complete. Flag the exceptions where consolidation is not advisable (e.g., regulatory separation, unsupported legacy apps).
  • Plan and execute inter-forest migrations of users, groups, computers, and service accounts, including SID history, password migration/sync, workstation re-joins and profile migration, and resource access cutover in waves.
  • Remediate and rationalize acquired objects before migration: naming collisions, UPN/email suffix conflicts, stale accounts, duplicate groups, and nested-group sprawl.
  • Migrate or rebuild dependent services: DNS zones, DHCP, file servers/shares and ACLs, ADCS/PKI, application service accounts, and LDAP/Kerberos-dependent apps.
  • Deliver Day-1 capabilities such as cross-company email/calendar visibility, collaboration access, and SSO to shared applications.
  • Run long-term consolidation including forest and domain decommissioning: SID history cleanup, GPO and naming standardization, and removal of legacy trusts, DCs, and stale objects.
  • Handle tenant-to-tenant coordination with the messaging and collaboration teams.
  • Keep a repeatable acquisition integration playbook current and improve it after each deal.

Divestitures & Separations

  • Support divestitures: dependency mapping, entitlement cleanup, and Transition Service Agreement (TSA) identity support.
  • Decommission shared trusts and sync connections at TSA exit.

Security & Risk

  • Assess the security posture of acquired environments before any connection is made (AD health, privileged account exposure, legacy protocols, unpatched DCs).
  • Design secure connectivity between companies: selective-authentication trusts, network segmentation, tiered administration, and least-privilege access.
  • Remediate common AD attack paths (Kerberoasting, unconstrained delegation, AdminSDHolder abuse, weak ADCS templates, excessive Domain Admin membership).
  • Partner with Security/SOC on monitoring, logging, and incident response during integration.
  • Support audit, compliance, and regulatory requirements (SOX, HIPAA, PCI, GDPR, as applicable).

Operations & Documentation

  • Maintain runbooks, cutover plans, rollback plans, and post-migration validation checklists.
  • Provide Tier 3 support for complex AD, DNS, DHCP, GPO, and PKI issues.
  • Mentor junior engineers and contribute to standards and automation.

Required Qualifications

  • 8+ years of experience engineering enterprise Active Directory in multi-domain / multi-forest environments.
  • Demonstrated M&A experience: at least [2–3] completed acquisitions or mergers where you personally led or executed the identity workstream. Divestiture experience is a plus.
  • Hands-on experience with AD migration tools, such as:
  • Quest / Binary Tree On Demand Migration or Migration Manager
  • Microsoft Active Directory Migration Tool (ADMT)
  • Microsoft Entra Connect / Cloud Sync
  • Other third-party tools (e.g., Quest, ShareGate, BitTitan, Semperis, CoreView, or equivalent)
  • Deep knowledge of trust types and cross-forest design, including selective authentication, SID filtering, SID history, and quarantine.
  • Proven experience consolidating acquired forests into a single target forest (inter-forest migrations of at least [1,000+] users), including decommissioning the source forest.
  • Strong understanding of AD security: tiered administration model, PAM/PAW, LAPS, Kerberos/NTLM hardening, ADCS security, and AD attack and defense techniques.
  • Strong working knowledge of DNS, DHCP, GPO, Sites & Services, replication, and PKI/ADCS.
  • Advanced PowerShell scripting for automation, reporting, and bulk operations.
  • Experience with hybrid identity: Microsoft Entra ID, Entra Connect, tenant-to-tenant migration, and Conditional Access.
  • Excellent communication skills; able to explain risk and tradeoffs to executives, legal, and non-technical stakeholders.

Preferred Qualifications

  • Experience with tenant-to-tenant migrations in Microsoft 365 (Exchange, Teams, SharePoint/OneDrive).
  • Familiarity with identity security tooling: Microsoft Defender for Identity, Semperis DSP, Tenable AD, PingCastle, BloodHound (defensive use).
  • Experience with federation and SSO (AD FS, SAML, OIDC, Ping, Okta) between organizations.
  • Experience with Day-1 / Day-100 integration planning and working alongside an IMO; exposure to Transition Service Agreements (TSAs) is a plus.
  • Exposure to PAM tools (CyberArk, BeyondTrust, Delinea) and IGA (SailPoint, Saviynt).
  • Experience with ITIL / change management in regulated environments.
  • Relevant certifications: Microsoft (AZ-500, SC-300, MS-102), CISSP, GIAC (GCWN, GPPA), or similar.
  • Bachelor's degree in IT, Computer Science, or equivalent experience.

Working Conditions

  • Occasional travel to acquired sites: [x%]
  • On-call and weekend cutover work is expected during migrations.
  • [Security clearance / background check requirements, if any]

What Cencora offers

We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members’ ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more. For details, visit https://www.virtualfairhub.com/cencora

Full time

Equal Employment Opportunity

Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law.

The company’s continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.

Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email [email protected]. We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned

Affiliated Companies

Affiliated Companies: AmerisourceBergen Services Corporation

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Innomar Strategies's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Innomar Strategies's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Innomar Strategies's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.