We are seeking an Authentication Engineer to design, implement, and maintain enterprise identity infrastructure in a contract role based in Buffalo, New York. This is a 12+ month engagement requiring deep expertise in Active Directory and Microsoft Entra ID within complex, regulated environments.
Responsibilities
Design and engineer hybrid identity architecture solutions, including Entra Connect, Conditional Access, and multi-factor authentication implementations
Develop and execute strategic identity modernization initiatives and standards beyond day-to-day operational tasks
Create and maintain PowerShell automation scripts and integrate Microsoft Graph API and REST API solutions to streamline identity management processes
Implement and monitor Zero Trust security principles and Tier-0 security controls across identity infrastructure
Configure and optimize authentication protocols including SAML, OAuth, OIDC, Kerberos, and LDAP/LDAPS
Establish identity governance frameworks and ensure compliance with regulatory requirements
Monitor identity systems using tools such as Splunk, KQL, and CrowdStrike to detect and respond to threats
Collaborate with security and infrastructure teams to maintain enterprise authentication standards
Qualifications
Required
6+ years of hands-on experience engineering Active Directory and Microsoft Entra ID in enterprise environments
Proven track record designing strategic identity solutions and modernization initiatives
Show the full description
Deep expertise in hybrid identity architecture, Entra Connect, Conditional Access, MFA, and authentication protocols (SAML, OAuth, OIDC)
Advanced PowerShell scripting and automation capabilities with experience in Microsoft Graph API and REST API integration
Strong understanding of Zero Trust principles, Tier-0 security controls, and Identity Governance frameworks
Solid knowledge of authentication technologies including Kerberos, LDAP/LDAPS, and certificate-based authentication
Experience with monitoring and analytics tools such as Splunk, KQL, and CrowdStrike for identity threat detection
Preferred
Background working in regulated environments with compliance frameworks such as SOX, NIST, or FFIEC
Active Directory and Azure certifications
