Senior Entra ID & AD Migration Engineer - SSO & IAM Lead

Two95 International, Inc; Newtown Square (MD); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Two95 International, Inc. is seeking an experienced Senior Active Directory Engineer to support an enterprise SSO migration project in Newtown Square, PA. The role focuses on transitioning 100+ applications from PingFederate to Microsoft Entra ID and ongoing Active Directory administration.

You will configure SSO connectors, tailor authentication attributes, and collaborate with vendor teams to coordinate migration activities. This is an onsite role requiring 3 days per week in the office.

Qualifications

• Experience with Entra ID/Azure AD and Active Directory administration.
• Proven ability to migrate SSO and identity integrations.
• Knowledge of PingFederate SSO migration and integration.
• Strong understanding of SAML 2.0 and OpenID Connect (OIDC).

Responsibilities

• Lead the migration of 100+ applications from PingFederate SSO to Microsoft Entra ID.
• Configure and migrate SSO connectors, authentication methods, and enterprise app integrations.
• Customize SSO integrations including user roles, claims, and authentication attributes.
• Coordinate migration activities with PingFederate vendors and application teams.
• Perform SSO integration testing, validation, and production cutovers.
• Administer and support on-premises Active Directory on Windows Server 2022.
• Manage Entra ID policies, configurations, authentication, and access controls.
• Support DNS, IPAM, and Windows Certificate Services.

Skills

Azure AD

Active Directory

SSO

IAM

Tools

PingFederate

OpenID Connect

SAML 2.0

Windows Server 2022

DNS

IPAM

Windows Certificate Services

Job description

Two95 International, Inc. is seeking an experienced Senior Active Directory Engineer to support an enterprise SSO migration project in Newtown Square, PA. The role focuses on transitioning 100+ applications from PingFederate to Microsoft Entra ID and ongoing Active Directory administration.

You will configure SSO connectors, tailor authentication attributes, and collaborate with vendor teams to coordinate migration activities. This is an onsite role requiring 3 days per week in the office.