Yes, a Windows account can be a member of multiple security groups. Yes, Windows security groups can nest within Active Directory. To be honest, as a former directory services administrator, your directory services administrators should be able to provide these mappings to you. There's nothing native within SQL Server that gets it all. Your DS admins should have the tools which do.