LHH is working with a client based in Chicago that is looking to hire an Active Directory and Identity Governance Specialist to join our team for a 6+ month project. The role will be 100% remote if not in Chicago. If you live in Chicago, the client would like you to be on-site 1 day/week, but not required.

The ideal candidate will need to have at least 4 years of Security (Identity Governance) experience and Active Directory/Group Policy experience.

Our client is seeking a detail-oriented and strategic Active Directory & Identity Governance Specialist to lead a six-month initiative focused on improving administrative access controls, rationalizing Group Policy Objects (GPOs), standardizing AD group descriptions, and aligning hybrid identity configurations with Entra ID best practices. This role is critical to enhancing audit readiness, reducing complexity, and supporting Zero Trust principles across the enterprise.

Objectives

• AD Admin Justification Framework: Improve & Help drive the process for requesting, approving, and reviewing AD Admin access.

• Group Policy Object (GPO) Rationalization: Identify, consolidate, and decommission redundant or conflicting GPOs.

• AD Group Description Standardization: Apply consistent naming and description conventions to improve discoverability and reduce access confusion.

• Entra ID Alignment: Ensure hybrid identity configurations are secure, efficient, and aligned with best practices.

Expected Outcomes

• Reduced complexity and risk in AD environments

• Improved audit readiness and access transparency

• Stronger alignment with Zero Trust and least privilege principles

• Enhanced operational efficiency for IAM and support teams

Required Skills & Qualifications

• Strong expertise in Active Directory administration, including GPO management and group structuring

• Experience with Entra ID (Azure AD) and hybrid identity configurations

• Familiarity with Zero Trust and least privilege access models

• Proficiency in access governance frameworks and audit readiness

• Ability to lead cross-functional collaboration and drive process improvements

• Excellent documentation and reporting skills

• Strong analytical and problem-solving capabilities

Education:

Education and Experience

1. Bachelor's degree in Computer Science or equivalent experience.

2. Typically a minimum of four years experience in security aspects of multiple platforms, operating systems, software communications and network protocols.

3. Previous help desk experience desirable.

4. Applicable certifications preferred.

Benefit offerings available for our associates include medical, dental, vision, life insurance, short-term disability, additional voluntary benefits, EAP program, commuter benefits and a 401K plan. Our benefit offerings provide employees the flexibility to choose the type of coverage that meets their individual needs. In addition, our associates may be eligible for paid leave including Paid Sick Leave or any other paid leave required by Federal, State, or local law, as well as Holiday pay where applicable.

Equal Opportunity Employer/Veterans/Disabled

To read our Candidate Privacy Information Statement, which explains how we will use your information, please navigate to https://www.lhh.com/us/en/candidate-privacy

The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable:

• The California Fair Chance Act
• Los Angeles City Fair Chance Ordinance
• Los Angeles County Fair Chance Ordinance for Employers
• San Francisco Fair Chance Ordinance

Massachusetts Candidates Only: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.