Entra ID & Active Directory Engineer

V Group Inc.; New York (NY); On-site; USD 90,000 - 131,000; Full time

Job summary

NYC Department of Social Services seeks an experienced Active Directory / Entra ID Engineer for a long term contract in Brooklyn, NY. The role covers design, implementation, security, and ongoing management of directory services across on-prem and cloud environments.

The candidate will administer AD/Entra ID, enforce policy, perform security audits, and ensure disaster recovery readiness. Onsite interviews are required; project duration up to 36 months with potential extension.

Qualifications

• Candidates should have strong experience in Directory Services Management and AD/Entra ID engineering.
• Experience with security audits, vulnerability assessments, and regulatory compliance is required.
• Ability to design, implement, and monitor authentication services across on-prem and cloud environments.

Responsibilities

• Administer and maintain Active Directory (AD) infrastructure.
• Monitor AD replication and domain controllers; ensure high availability.
• Implement and enforce group policies and access control policies.
• Perform regular security audits and vulnerability assessments.
• Manage user accounts, groups, and OUs; conduct backups and DR testing for AD.
• Integrate LDAP and Kerberos authentication services; configure Entra ID.
• Configure and manage single sign-on (SSO) and MFA solutions.
• Integrate on-prem AD with Entra ID for hybrid identity.
• Manage application registrations and API permissions for IAM.
• Perform security reviews and compliance audits for Entra ID; monitor threats.
• Plan and execute infrastructure modernization projects; stay current with best practices.

Skills

Active Directory management

Entra ID administration

AD replication monitoring

Group policy enforcement

IAM policies

LDAP/Kerberos integration

SSO & MFA configuration

Hybrid identity

Security audits

Job description

NYC Department of Social Services seeks an experienced Active Directory / Entra ID Engineer for a long term contract in Brooklyn, NY. The role covers design, implementation, security, and ongoing management of directory services across on-prem and cloud environments.

The candidate will administer AD/Entra ID, enforce policy, perform security audits, and ensure disaster recovery readiness. Onsite interviews are required; project duration up to 36 months with potential extension.