Senior Identity Engineer: AD, Entra ID & Zero Trust

Computer Task Group, Inc; Buffalo (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

CTG, a Cegeka company, is seeking a Senior Identity Engineer in Buffalo, NY to engineer and support enterprise AD and Microsoft Entra ID environments. You will manage forests, domains, trusts, replication, GPOs, and Entra Connect, and implement Conditional Access, MFA, PAM/PIM, and Zero Trust controls.

The role emphasizes PowerShell automation, integration with Microsoft Graph, REST APIs, JSON, and Git; plus monitoring identity services with Splunk and KQL.

Qualifications

• 6+ years of professional experience in technical engineering, infrastructure, systems design, or architecture.
• Advanced experience with Active Directory, Microsoft Entra ID, hybrid identity, and authentication.
• Strong knowledge of Kerberos, LDAP/LDAPS, NTLM, SAML, OAuth 2.0, OIDC, and certificate-based authentication.
• Advanced PowerShell, troubleshooting, analytical, and problem-solving skills.
• Excellent communication and collaboration skills.

Responsibilities

• Engineer and support enterprise AD and Entra ID environments.
• Manage AD forests, domains, trusts, replication, GPO, and Entra Connect.
• Implement Conditional Access, MFA, PAM/PIM, Zero Trust.
• Develop PowerShell automation and integrate Graph, REST APIs, JSON, and Git.
• Monitor identity services with Splunk, KQL, and CrowdStrike IDP.
• Collaborate with engineering, business, security, and vendor teams.
• Mentor engineers and provide technical guidance.

Skills

Active Directory

Microsoft Entra ID

PowerShell

Identity & access management

Troubleshooting

Communication

Analytical thinking

Education

Bachelor's degree in Computer Science or related field

Tools

GitLab

Azure DevOps

ServiceNow

CyberArk

SailPoint

Terraform

Python

Bicep

ARM

Job description

CTG, a Cegeka company, is seeking a Senior Identity Engineer in Buffalo, NY to engineer and support enterprise AD and Microsoft Entra ID environments. You will manage forests, domains, trusts, replication, GPOs, and Entra Connect, and implement Conditional Access, MFA, PAM/PIM, and Zero Trust controls.

The role emphasizes PowerShell automation, integration with Microsoft Graph, REST APIs, JSON, and Git; plus monitoring identity services with Splunk and KQL.