Authentication Engineer (Entra / AD) - 3667093

Lighthouse Technology Services, Inc; Buffalo (NY); On-site; USD 62,000 - 103,000; Full time

Benefits offered by this job

Hybrid in Buffalo

W-2 Employment

Job summary

Lighthouse Technology Services, Inc. is partnering with our client to fill an Authentication Engineer specializing in AD and Entra in Buffalo, NY. This is a 12-month hybrid contract with potential extension.

The role focuses on hybrid identity, Entra Connect, Conditional Access, and automation using PowerShell and Graph API, with strong emphasis on security and compliance.

Qualifications

• 6+ years of hands-on experience engineering Active Directory and Microsoft Entra ID in enterprise environments.
• Proven track record of strategic identity engineering beyond operational tasks.
• Deep expertise in hybrid identity architecture including Entra Connect, Conditional Access, MFA, and authentication protocols (SAML, OAuth, OIDC).
• Advanced PowerShell scripting and automation skills with Graph API REST API integration.
• Strong understanding of Zero Trust principles, Tier-0 security controls, and Identity Governance frameworks.
• Experience with monitoring and analytics tools such as Splunk, KQL, and CrowdStrike for identity threat detection.
• Knowledge of authentication technologies including Kerberos, LDAP/LDAPS, and certificate-based authentication.
• Background in regulated environments with compliance frameworks such as SOX, NIST, or FFIEC preferred.
• Active Directory and Azure certifications highly preferred.

Responsibilities

• Design and implement authentication frameworks for AD and Entra ID environments.
• Lead automation initiatives for identity services and policy development.
• Architect hybrid identity solutions leveraging Entra Connect.
• Develop PowerShell scripts and Graph API integrations to streamline identity lifecycle management.
• Build and maintain monitoring with Splunk and KQL for threat detection and compliance reporting.
• Engineer Zero Trust controls and Privileged Access Management frameworks.
• Support incident management for complex authentication and directory services issues.
• Collaborate with cybersecurity teams to remediate identity vulnerabilities.
• Create app registrations and service principals in Entra ID and manage certificate-based and passwordless authentication.
• Document standards, configuration patterns, and governance processes for audit and compliance.

Skills

Active Directory

Microsoft Entra ID

PowerShell

Graph API

Zero Trust

Identity Governance

Splunk

KQL

MFA

SAML/OIDC

Kerberos

LDAP/LDAPS

Education

Azure certifications

Tools

Entra Connect

Microsoft Graph API

Entra Connect

CrowdStrike

Job description

Lighthouse Technology Services is partnering with our client to fill their Authentication Engineer specializing in AD and Entra position! This is a 12 month contract with potential to extend and will be hybrid in Buffalo, NY. This role will be a W2 employee of Lighthouse Technology Services. No C2C or subcontracting arrangements will be considered.

What You’ll Be Doing:

• Design and implement strategic authentication frameworks and standards for enterprise Active Directory and Microsoft Entra ID environments
• Lead automation initiatives to modernize identity services, including Conditional Access policy development and authentication hardening
• Architect hybrid identity solutions leveraging Entra Connect, ensuring secure synchronization between on-premises AD and cloud environments
• Develop advanced PowerShell scripts and Microsoft Graph API integrations to streamline identity lifecycle management and operational processes
• Build and maintain monitoring solutions using Splunk and KQL for identity threat detection, incident investigation, and compliance reporting
• Engineer Zero Trust security controls and Privileged Access Management frameworks to protect Tier-0 administration
• Support incident management and troubleshooting for complex authentication and directory services issues
• Collaborate with cybersecurity teams to evaluate and remediate identity vulnerabilities in regulated financial services environment
• Create app registrations and service principals within Entra ID while managing certificate-based and passwordless authentication implementations
• Document technical standards, configuration patterns, and governance processes for audit and compliance requirements

What You’ll Need to Have:

• 6+ years of hands-on experience engineering both Active Directory and Microsoft Entra ID in enterprise environments
• Proven track record of strategic identity engineering beyond operational tasks, with demonstrated ability to design standards and modernization initiatives
• Deep expertise in hybrid identity architecture including Entra Connect, Conditional Access, MFA, and authentication protocols (SAML, OAuth, OIDC)
• Advanced PowerShell scripting and automation skills, with experience in Microsoft Graph API and REST API integration
• Strong understanding of Zero Trust principles, Tier-0 security controls, and Identity Governance frameworks
• Experience with monitoring and analytics tools such as Splunk, KQL, and CrowdStrike for identity threat detection
• Solid knowledge of authentication technologies including Kerberos, LDAP/LDAPS, and certificate-based authentication
• Background working in regulated environments with compliance frameworks such as SOX, NIST, or FFIEC preferred
• Active Directory and Azure certifications highly preferred

Pay Range: $70-75/hr

Questions about any of our jobs? Email us at [e-mail]

View all of our open jobs here: jobs.lhtservices.com