Authentication Engineer (Entra / AD)

Intone Inc; Buffalo (NY); Sur place; USD 120 000 - 160 000; Plein temps

Résumé du poste

Intone Inc in Buffalo, NY seeks an Authentication Engineer for a 12+ month contract to design and maintain enterprise identity infrastructure.

Responsibilities include hybrid identity architecture with Entra Connect, Conditional Access, MFA, SAML, OAuth, and OIDC; automation via PowerShell and Graph API; Zero Trust controls; identity governance; and threat monitoring with Splunk, KQL, and CrowdStrike.

Qualifications

• 6+ years hands-on experience engineering Active Directory and Entra ID in enterprise environments.
• Proven track record designing strategic identity solutions and modernization initiatives.
• Deep expertise in hybrid identity architecture, Entra Connect, CA, MFA, and authentication protocols.

Responsabilités

• Design and engineer hybrid identity architecture solutions, including Entra Connect, Conditional Access, and MFA implementations.
• Develop and execute strategic identity modernization initiatives and standards beyond day-to-day tasks.
• Create and maintain PowerShell automation scripts and integrate Graph API and REST API solutions.
• Implement and monitor Zero Trust security principles and Tier-0 security controls.
• Configure and optimize authentication protocols including SAML, OAuth, OIDC, Kerberos, and LDAP/LDAPS.
• Establish identity governance frameworks and ensure regulatory compliance.
• Monitor identity systems using Splunk, KQL, and CrowdStrike to detect and respond to threats.
• Collaborate with security and infrastructure teams to maintain enterprise authentication standards.

Connaissances

Active Directory

Microsoft Entra ID

PowerShell scripting

Graph API

REST API integration

Hybrid identity

SAML

OAuth

OIDC

Kerberos

LDAP/LDAPS

Zero Trust

Identity Governance

Splunk

KQL

CrowdStrike

Entra Connect

Conditional Access

MFA

Outils

Splunk

KQL

CrowdStrike

Description du poste

We are seeking an Authentication Engineer to design, implement, and maintain enterprise identity infrastructure in a contract role based in Buffalo, New York. This is a 12+ month engagement requiring deep expertise in Active Directory and Microsoft Entra ID within complex, regulated environments.

Responsibilities

• Design and engineer hybrid identity architecture solutions, including Entra Connect, Conditional Access, and multi-factor authentication implementations
• Develop and execute strategic identity modernization initiatives and standards beyond day-to-day operational tasks
• Create and maintain PowerShell automation scripts and integrate Microsoft Graph API and REST API solutions to streamline identity management processes
• Implement and monitor Zero Trust security principles and Tier-0 security controls across identity infrastructure
• Configure and optimize authentication protocols including SAML, OAuth, OIDC, Kerberos, and LDAP/LDAPS
• Establish identity governance frameworks and ensure compliance with regulatory requirements
• Monitor identity systems using tools such as Splunk, KQL, and CrowdStrike to detect and respond to threats
• Collaborate with security and infrastructure teams to maintain enterprise authentication standards

Qualifications

• Required
  • 6+ years of hands-on experience engineering Active Directory and Microsoft Entra ID in enterprise environments
  • Proven track record designing strategic identity solutions and modernization initiatives
  • Deep expertise in hybrid identity architecture, Entra Connect, Conditional Access, MFA, and authentication protocols (SAML, OAuth, OIDC)
  • Advanced PowerShell scripting and automation capabilities with experience in Microsoft Graph API and REST API integration
  • Strong understanding of Zero Trust principles, Tier-0 security controls, and Identity Governance frameworks
  • Solid knowledge of authentication technologies including Kerberos, LDAP/LDAPS, and certificate-based authentication
  • Experience with monitoring and analytics tools such as Splunk, KQL, and CrowdStrike for identity threat detection
• Preferred
  • Background working in regulated environments with compliance frameworks such as SOX, NIST, or FFIEC
  • Active Directory and Azure certifications