Senior Identity Architect: Entra/AD & Zero Trust (Hybrid)

Intone Inc; Buffalo (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

Intone Inc in Buffalo, NY seeks an Authentication Engineer for a 12+ month contract to design and maintain enterprise identity infrastructure.

Responsibilities include hybrid identity architecture with Entra Connect, Conditional Access, MFA, SAML, OAuth, and OIDC; automation via PowerShell and Graph API; Zero Trust controls; identity governance; and threat monitoring with Splunk, KQL, and CrowdStrike.

Qualifications

• 6+ years hands-on experience engineering Active Directory and Entra ID in enterprise environments.
• Proven track record designing strategic identity solutions and modernization initiatives.
• Deep expertise in hybrid identity architecture, Entra Connect, CA, MFA, and authentication protocols.

Responsibilities

• Design and engineer hybrid identity architecture solutions, including Entra Connect, Conditional Access, and MFA implementations.
• Develop and execute strategic identity modernization initiatives and standards beyond day-to-day tasks.
• Create and maintain PowerShell automation scripts and integrate Graph API and REST API solutions.
• Implement and monitor Zero Trust security principles and Tier-0 security controls.
• Configure and optimize authentication protocols including SAML, OAuth, OIDC, Kerberos, and LDAP/LDAPS.
• Establish identity governance frameworks and ensure regulatory compliance.
• Monitor identity systems using Splunk, KQL, and CrowdStrike to detect and respond to threats.
• Collaborate with security and infrastructure teams to maintain enterprise authentication standards.

Skills

Active Directory

Microsoft Entra ID

PowerShell scripting

Graph API

REST API integration

Hybrid identity

SAML

OAuth

OIDC

Kerberos

LDAP/LDAPS

Zero Trust

Identity Governance

Splunk

KQL

CrowdStrike

Entra Connect

Conditional Access

MFA

Tools

Splunk

KQL

CrowdStrike

Job description

Intone Inc in Buffalo, NY seeks an Authentication Engineer for a 12+ month contract to design and maintain enterprise identity infrastructure.

Responsibilities include hybrid identity architecture with Entra Connect, Conditional Access, MFA, SAML, OAuth, and OIDC; automation via PowerShell and Graph API; Zero Trust controls; identity governance; and threat monitoring with Splunk, KQL, and CrowdStrike.