Quest Migration Pro SME

GES is seeking a highly skilled Quest Migration Pro Subject Matter Expert (SME) to support the Defense Enclave Services (DES) program—an enterprise-scale digital modernization initiative for the Defense Information Systems Agency (DISA) and Department of Defense (DoD) Fourth Estate Agencies.

This role will serve as the technical authority for enterprise Active Directory migration activities utilizing Quest Migration Manager (QMM) / Quest Migrator Pro. The successful candidate will lead planning, design, implementation, troubleshooting, and optimization of large-scale domain consolidation and user migration efforts while ensuring secure migration of user identities, workstations, profiles, and applications with minimal operational impact.




The Quest Migration Pro SME will partner closely with Active Directory, Identity Management, Endpoint Engineering, Security, and Program Management teams to develop migration strategies supporting thousands of users across multiple DoD organizations. This position requires deep technical expertise in Active Directory migrations, SID History, inter-forest trusts, Windows endpoint migrations, and Quest migration tooling, as well as strong communication skills to collaborate with government stakeholders and mission partners.

Lead the planning, design, and execution of enterprise Active Directory migrations utilizing Quest Migration Manager (QMM) / Quest Migrator Pro




Design and implement migration strategies for users, groups, computers, service accounts, and security principals between Active Directory forests




Develop migration runbooks, wave plans, rollback procedures, and technical documentation supporting enterprise migration operations




Configure and administer Quest Migration Manager components including Directory Synchronization, Resource Updating Manager, Migration Manager for Active Directory, and associated migration agents




Design, configure, and troubleshoot one-way Active Directory trusts required to support migration operations




Implement and validate SID History migration while ensuring compliance with DoD security requirements and migration objectives




Perform workstation profile migrations utilizing Quest tools while maintaining user settings, permissions, and application functionality




Coordinate with Endpoint Engineering teams supporting MECM, Intune, Autopilot, Group Policy, and Windows deployment solutions to ensure successful workstation migrations




Collaborate with Identity Management teams to synchronize Active Directory objects, resolve identity conflicts, and maintain directory integrity throughout migration activities




Support migration of file share access, application permissions, and other security resources requiring SID History or resource updating




Troubleshoot complex migration failures involving Active Directory replication, Kerberos authentication, DNS, trusts, GPO processing, and Windows security




Develop PowerShell automation to support migration validation, reporting, provisioning, cleanup, and operational efficiencies




Support security assessments and implementation of STIG-compliant migration solutions while identifying and mitigating operational risks




Provide technical leadership during migration events, cutovers, and post-migration stabilization activities,

Required Qualifications:

• Bachelor's degree with 7-10 years of relevant experience, or Master's degree with 5–8 years of experience (additional experience may be considered in lieu of degree)
• Active DoD Secret clearance
• Minimum 7 years of experience supporting enterprise Microsoft Active Directory environments
• Minimum 3 years of hands-on experience utilizing Quest Migration Manager (QMM), Quest Migrator Pro, or equivalent enterprise Active Directory migration solutions
• Experience designing and supporting Active Directory forest migrations, consolidations, or restructures
• Strong understanding of Active Directory architecture including forests, domains, trusts, sites, replication, DNS, FSMO roles, Group Policy, and authentication
• Experience implementing and supporting SID History migration and resource access preservation
• Experience migrating Windows workstation profiles while maintaining user data and application functionality
• Strong PowerShell scripting skills supporting migration automation and reporting
• Experience troubleshooting Active Directory authentication, Kerberos, LDAP, DNS, and trust-related issues
• Experience supporting Windows 10/11 enterprise environments
• Experience working directly with customers and stakeholders to gather requirements, provide migration status, and resolve technical issues
• Strong communication, organizational, analytical, and problem-solving skills with the ability to support large enterprise migration activities
• Experience using Atlassian tools including Jira and Confluence
• Current DoD 8570 IAT Level II certification (Security+ CE, CISSP, or equivalent)

Desired Qualifications:

• Experience supporting migrations exceeding 10,000 users or devices
• Experience supporting Defense Enclave Services (DES), DISA, or other large DoD enterprise environments
• Experience integrating Quest Migration Manager with MECM, Microsoft Intune, Azure AD, or Microsoft Entra ID
• Experience with Microsoft Identity Manager (MIM), Active Directory Federation Services (AD FS), or Microsoft Entra Connect
• Knowledge of Zero Trust architecture and identity modernization initiatives
• Experience supporting enterprise file server migrations and security translation
• Experience with Windows Autopilot, Microsoft Intune, and modern endpoint management
• Microsoft certifications such as Microsoft Certified: Identity and Access Administrator Associate or Windows Server Hybrid Administrator Associate
• Quest-certified training or professional experience administering Quest Migration Manager

**Candidate Questionnaire**

Please ask the following questions during the screening process and submit the responses along with the candidate's resume:

• Describe your experience with Quest Migration Manager or Quest Migrator Pro. Which components have you personally configured or administered?
• Have you designed or supported Active Directory migrations between separate forests? Approximately how many users and devices were migrated?
• Explain how SID History works and why it is important during an Active Directory migration.
• What are the security considerations and risks associated with enabling SID History migration?
• Describe your experience configuring one-way and two-way Active Directory trusts. What issues have you encountered?
• Have you used Resource Updating Manager (RUM)? What resources have you updated during migrations?
• Describe a difficult migration issue involving Active Directory replication, Kerberos, DNS, or trust relationships that you successfully resolved.
• What PowerShell scripts have you written to automate migration activities or validate migration success?
• How do you validate that users retain access to legacy file shares and applications after migration?
• Have you supported large-scale migration cutovers or migration waves? Approximately how many users or endpoints were included in your largest migration event?
• What experience do you have working in DISA or other DoD environments requiring STIG compliance during migration activities?
• Describe your experience migrating Windows user profiles while preserving user settings, application configurations, and desktop experience.