Active Directory / Entra ID Engineer

V Group Inc.; New York (NY); On-site; USD 90,000 - 131,000; Full time

Job summary

NYC Department of Social Services seeks an experienced Active Directory / Entra ID Engineer for a long term contract in Brooklyn, NY. The role covers design, implementation, security, and ongoing management of directory services across on-prem and cloud environments.

The candidate will administer AD/Entra ID, enforce policy, perform security audits, and ensure disaster recovery readiness. Onsite interviews are required; project duration up to 36 months with potential extension.

Qualifications

• Candidates should have strong experience in Directory Services Management and AD/Entra ID engineering.
• Experience with security audits, vulnerability assessments, and regulatory compliance is required.
• Ability to design, implement, and monitor authentication services across on-prem and cloud environments.

Responsibilities

• Administer and maintain Active Directory (AD) infrastructure.
• Monitor AD replication and domain controllers; ensure high availability.
• Implement and enforce group policies and access control policies.
• Perform regular security audits and vulnerability assessments.
• Manage user accounts, groups, and OUs; conduct backups and DR testing for AD.
• Integrate LDAP and Kerberos authentication services; configure Entra ID.
• Configure and manage single sign-on (SSO) and MFA solutions.
• Integrate on-prem AD with Entra ID for hybrid identity.
• Manage application registrations and API permissions for IAM.
• Perform security reviews and compliance audits for Entra ID; monitor threats.
• Plan and execute infrastructure modernization projects; stay current with best practices.

Skills

Active Directory management

Entra ID administration

AD replication monitoring

Group policy enforcement

IAM policies

LDAP/Kerberos integration

SSO & MFA configuration

Hybrid identity

Security audits

Job description

Client: NYC Department of Social Services

Job Title: Active Directory / Entra ID Engineer

Duration: Long Term Contract (Up to 36 Months + Possible 2-Year Extension)

Location: Brooklyn, New York (11238)

Position Type: Contract

Interview Type: Both Web Cam and In Person Interview

Onsite/Remote/Hybrid: Onsite

Ceipal ID: NYC_AD911_MA

Job Code: DSS-ITS-C-20260729-1 - (79)

PROJECT DESCRIPTION: ITS serves all DSS program areas to fulfill their IT needs. To meet the business needs and ITS' workload, ITS is seeking qualified candidates in the areas of Database design, architecture, and development, including base definition, structure, documentation, long-range requirements, operational guidelines, and protection. Ensures accuracy and completeness of data in master files and various support tools, such as base dictionaries. Establishes and maintains security and integrity controls. Formulates and monitors policies, procedures and standards relating to database management. Proposes and implements enhancements that will improve the performance and reliability of various systems that ITS supports across DSS program areas.

Tasks & Duties

• Directory Services Management
• Administer and maintain Active Directory (AD) infrastructure.
• Monitor and manage AD replication and domain controllers.
• Implement and enforce group policies and access control policies.
• Perform regular security audits and vulnerability assessments.
• Manage user accounts, groups, and organizational units (OUs).
• Conduct regular backups and disaster recovery testing for AD.
• Integrate and manage authentication services, such as LDAP and Kerberos.
• Configure and manage Microsoft Entra ID (formerly Azure Active Directory).
• Implement and manage identity and access management (IAM) policies.
• Monitor and secure Entra ID tenant against unauthorized access and threats.
• Configure single sign-on (SSO) and multi-factor authentication (MFA) solutions.
• Integrate on-premises AD with Microsoft Entra ID for hybrid identity solutions.
• Manage application registrations and API permissions.
• Perform regular security reviews and compliance audits for Entra ID.
• Security and Compliance
• Implement advanced security measures and monitor for potential threats.
• Ensure compliance with industry standards and regulatory requirements.
• Conduct regular security audits and penetration testing.
• Develop and maintain security policies and procedures.
• Performance Optimization and Reliability
• Conduct performance tuning and optimization of Exchange and Directory services.
• Implement high-availability and failover solutions.
• Monitor and troubleshoot performance issues across the infrastructure.
• Plan and execute system upgrades and migrations.
• Scalability and Futureproofing
• Design and implement scalable solutions to accommodate future growth.
• Stay updated with the latest technologies and industry’s best practices.
• Provide recommendations for future improvements and upgrades.
• Plan and execute infrastructure modernization projects.
• Support and Training
• Provide technical support and troubleshooting assistance.
• Develop and maintain documentation for all systems and procedures.
• Train in-house IT staff in the best practices and new technologies.
• Offer guidance and support during major incidents and outages.