Representative engagements at federal, public-sector, and Fortune 500 scale. Anonymized;
details available under engagement.
Federal Judiciary · U.S. Courts
Unifying 250+ independent federal court units into a single national directory.
BCG and team led the engineering effort to migrate the federal judiciary's independent
court-unit forests into one unified Active Directory backbone. The work covered GPO
assessment, login-script conversion, court-side training delivery, and the PowerShell
automation framework that turned a one-off migration into a production line —
repeatable court by court, on schedule, with the local IT teams in the driver's seat.
250+ court units · Independent forests retired · One national directory · Repeatable migration framework
Big Four Professional Services — Global Operations
Operating a Big Four identity backbone at Fortune 500 scale.
BCG and team kept a global, multi-forest identity backbone healthy under tier-model
hardening constraints. The engagement coordinated Microsoft's Risk and Health Assessment
for Active Directory (ADRAP) and drove the remediation program across a Red Forest
(ESAE)-hardened estate — the kind of work where a single change has to be safe
across hundreds of domain controllers and dozens of production domains.
28 production domains · 4 forests · 900+ domain controllers · 300+ AD sites
Big Four Professional Services — Identity Governance Program
Returning ownership and accountability to a sprawling identity estate.
BCG built and delivered an identity-hygiene program that rationalized standard,
privileged, service, and non-human identities across an enterprise directory. The
engagement established group ownership models, naming standards, lifecycle controls,
and the reusable PowerShell tooling that made cleanup repeatable at scale —
turning ungoverned sprawl into a governed estate the client could operate themselves.
Identity discovery · Group rationalization · Lifecycle governance · Bulk-remediation automation
US Public Sector · Major-City IT
Consolidating dozens of municipal agencies into shared identity infrastructure.
BCG led a multi-year program moving dozens of agencies of a major American city off
agency-owned Active Directory and into shared central infrastructure. The team owned
forest-and-domain redesign, data-center hoteling, and the change management that made
a politically delicate cutover land cleanly — with each agency arriving on the
shared platform on its own schedule, without losing operational autonomy.
Multi-agency consolidation · Forest redesign · Data-center hoteling · Shared-services cutover
Aerospace & Defense · Fortune 500
Identity engineering inside a Fortune 500 aerospace and defense enterprise.
BCG and team supported Active Directory engineering across a Fortune 500 aerospace
and defense organization — the kind of multi-business-unit, post-merger estate
where forest design, tier-model hardening, and disciplined change control all have to
coexist with the engineering teams depending on AD every day. Regulated-program
cadence, no surprises, no production stalls.
Multi-business-unit estate · Tier-model hardening · Regulated-program change control · Operational continuity