Identity & Access Engineer III: Zero-Trust & Automation

Computer Task; Buffalo (NY); On-site; USD 100,000 - 150,000; Full time

Job summary

CTG is seeking a Technical Engineer III to support enterprise identity and access infrastructure in Buffalo, NY. The role focuses on AD and Microsoft Entra ID environments, IAM security controls, and automation using PowerShell and Graph APIs, with collaboration across security, engineering, and business teams.

The successful candidate will bring 6+ years in technical engineering, deep knowledge of authentication protocols, and experience with regulated environments.

Qualifications

• 6+ years of professional experience in technical engineering, infrastructure, systems design, or architecture.
• Advanced experience with Active Directory, Microsoft Entra ID, hybrid identity, and authentication.
• Strong knowledge of Kerberos, LDAP/LDAPS, NTLM, SAML, OAuth 2.0, OIDC, and certificate-based authentication.
• Advanced PowerShell, troubleshooting, analytical, and problem-solving skills.
• Excellent communication and collaboration skills.
• Bachelor's degree in Computer Science, Computer Engineering, or related field
• Experience with Python, Terraform, Bicep, ARM, GitLab, Azure DevOps, ServiceNow, CyberArk, or SailPoint.
• Experience with SOX, NIST, FFIEC, or NYDFS in a regulated environment.
• Financial services or enterprise identity engineering experience preferred.

Responsibilities

• Engineer and support enterprise Active Directory (AD) and Microsoft Entra ID environments.
• Manage AD forests, domains, trusts, replication, Group Policy, and Entra Connect (PHS/PTA).
• Implement Conditional Access, MFA, PAM/PIM, Zero Trust, and identity security controls.
• Develop PowerShell automation and integrate Microsoft Graph, REST APIs, JSON, and Git.
• Monitor and troubleshoot identity services using Splunk, KQL, and CrowdStrike IDP.
• Support identity lifecycle, RBAC, access governance, audit, and regulatory compliance.
• Collaborate with engineering, business, security, and vendor teams to deliver technical solutions.
• Mentor engineers and provide technical guidance.
• Serve as a technical SME for identity, authentication, and infrastructure technologies.
• Develop technical designs, standards, documentation, and implementation solutions.
• Troubleshoot complex technical issues and apply industry best practices.
• Support risk management, security, audit, and regulatory requirements.
• Mentor and coach technical staff.
• Review technical documentation, designs, and proposed changes.
• Coordinate vendor resources as needed.

Education

Bachelor's degree in Computer Science, Computer Engineering, or related field

Tools

Python

Terraform

Bicep

ARM

GitLab

Azure DevOps

ServiceNow

CyberArk

SailPoint

Job description

CTG is seeking a Technical Engineer III to support enterprise identity and access infrastructure in Buffalo, NY. The role focuses on AD and Microsoft Entra ID environments, IAM security controls, and automation using PowerShell and Graph APIs, with collaboration across security, engineering, and business teams.

The successful candidate will bring 6+ years in technical engineering, deep knowledge of authentication protocols, and experience with regulated environments.