About

About the Project A mid-size educational institution with two separate but structurally similar districts is seeking an experienced engineer to lead the migration from on-premise Active Directory to a cloud-based identity solution. They currently operate 90–95% Chromebooks, ~100 Windows devices, and maintain a complex identity environment involving Duo MFA, ClassLink, Google Workspace, and limited Azure AD usage. They want to move away from on-prem Active Directory entirely and transition to a modern, efficient, cloud-based directory environment while ensuring minimal disruption to staff, students, and summer academic programs. There is an expected completion date before August 2026, but work will begin with deep-dive discovery sessions in December and January. What They Need The client is looking for someone who can: 1. Lead and advise on migration strategy -Assess the current hybrid environment (AD, Google Workspace, Azure AD, ClassLink, Duo MFA). -Evaluate whether Azure AD or Google Workspace is the best long-term replacement for on-prem AD. -Provide guidance on licensing considerations, especially given budget constraints and limited Azure usage. 2. Build a clear, actionable migration roadmap -Document processes for user syncing, password synchronization, identity flow, and cut-over planning. -Identify potential risks and design a low-friction transition path for staff and students. -Plan around summer school schedules and device usage cycles. 3. Execute a phased implementation The client has two districts: -District A (large) -District B (very small, ~8 Windows devices) District B will be the proof-of-concept environment before implementing district-wide. 4. Provide technical expertise on: -Identity provider workflows -Password synchronization mechanisms -Chromebook + Windows coexistence during migration -Licensing implications (Azure AD free tier vs required upgrades) -Integrating Duo MFA and ClassLink with the new architecture -Ensuring continuity for accounts, passwords, and provisioning 5. Collaborate directly with the IT team -The client has a 3-person IT team and wants a consultant who can integrate smoothly, communicate clearly, and maintain momentum. -Discovery sessions will be scheduled in early December and early January, ideally in consecutive sessions (e.g., Tue/Thu). Ideal Experience You should have proven expertise in: -Active Directory migrations (on-prem → cloud) -Azure AD / Entra ID configuration and migration -Google Workspace administration (Education preferred) -Identity providers such as ClassLink -MFA solutions such as Duo -Hybrid identity environments -Designing and executing phased rollout plans in operational school or enterprise environments Bonus experience (not required but helpful): -Infinite Campus familiarity -Automations or scripting for education environments -Knowledge of Chromebook ecosystems at scale Budget Notes -The client is a public-sector institution and is cost sensitive. -Cost-efficiency and transparency are highly valued. What Success Looks Like -A clear, detailed migration roadmap -Smooth implementation of the test environment -Full district cut-over completed by Summer 2026 -Seamless integration with Google or Azure as the new identity source -Secure, reliable authentication for all users -Minimal disruption to operations or summer school programs How to Apply Please respond with: -A brief summary of your experience with similar cloud migrations -Whether you have experience with: ClassLink Duo MFA Google Workspace for Education Chromebook-heavy environments -Your availability for discovery sessions in December and early January. -Your proposed hourly rate.