AD/Entra Engineer – Contractor

Jobtailor; New York (NY); On-site; USD 100,000 - 140,000; Full time

Job summary

Jobtailor in the United States seeks an experienced Directory Services Engineer to lead AD to Entra ID migrations and set up authentication and device management with Entra ID and Intune. You will document findings, design migrations, and train administrators for operational handoff.

Role requires 5+ years in directory services, strong knowledge of Entra Connect, and cloud-first identity protection. Travel to client sites may be required; background checks will be conducted.

Qualifications

• 5+ years of hands-on directory services engineering experience.
• Demonstrated experience executing AD to Entra ID migrations in complex environments.
• Strong working knowledge of Entra Connect and authentication methods (Password Hash Sync, Pass-through Authentication, ADFS).
• Hands-on experience with Microsoft Intune, including device compliance and Entra ID Join and Hybrid Join.
• Experience with Conditional Access, MFA, and identity protection in a cloud-first model.
• Solid grasp of AD security, vulnerabilities and safeguards, and Tier-0 boundaries.
• Understanding of modern authentication (OIDC, SAML, Kerberos) and access control models (RBAC, PBAC, ABAC).
• Working familiarity with Azure environments.
• Ability to author technical documentation and conduct knowledge transfer sessions.
• Must be based in the United States and authorized to work without sponsorship.
• Must be available for occasional on-site travel (expenses covered by the client).
• Must be able to pass a background check.

Responsibilities

• Execute discovery and assessment of the on-premises Active Directory environment and Microsoft 365 tenant, and document findings and dependencies.
• Contribute to migration design and tool selection alongside the architect.
• Perform Entra ID configuration, identity synchronization, and authentication setup.
• Run test migrations, then migrate and validate users, groups, and service accounts.
• Configure identity security controls including MFA, Conditional Access, and self-service password reset.
• Support endpoint and device management integration through Microsoft Intune.
• Produce as-built documentation and deliver administrator training and operational handoff.

Skills

Active Directory

Entra ID migrations

Intune

MFA & Conditional Access

Azure environments

Technical documentation

Knowledge transfer

Tools

Entra Connect

Azure

Job description

Responsibilities

• Execute discovery and assessment of the on-premises Active Directory environment and Microsoft 365 tenant, and document findings and dependencies
• Contribute to migration design and tool selection alongside the architect
• Perform Entra ID configuration, identity synchronization, and authentication setup
• Run test migrations, then migrate and validate users, groups, and service accounts
• Configure identity security controls including MFA, Conditional Access, and self‑service password reset
• Support endpoint and device management integration through Microsoft Intune
• Produce as‑built documentation and deliver administrator training and operational handoff

Requirements

• 5+ years of hands‑on directory services engineering, including extensive experience supporting and troubleshooting on‑premises Active Directory (authentication, DFS, GPO, LDAP)
• Demonstrated experience executing AD to Entra ID migrations in complex enterprise environments
• Strong working knowledge of Entra Connect and authentication methods (Password Hash Sync, Pass‑through Authentication, ADFS)
• Hands‑on experience with Microsoft Intune, including device compliance and Entra ID Join and Hybrid Join
• Experience with Conditional Access, MFA, and identity protection in a cloud‑first model
• Solid grasp of AD security, common vulnerabilities and safeguards, and Tier‑0 security boundaries
• Understanding of modern authentication (OIDC, SAML, Kerberos) and access control models (RBAC, PBAC, ABAC)
• Working familiarity with Azure environments
• Ability to author technical documentation and conduct knowledge transfer sessions
• Must be based in the United States and authorized to work without sponsorship
• Must be available for occasional on‑site travel (expenses covered by the client)
• Must be able to pass a background check

Core Competencies

Demonstrates extensive expertise in directory services engineering, particularly in executing Active Directory to Entra ID migrations, configuring identity security controls, and managing Microsoft Intune for device compliance. Proficient in authoring technical documentation and conducting training sessions for operational handoff.