Technical Engineer III

Computer Task; Buffalo (NY); On-site; USD 100,000 - 150,000; Full time

Job summary

CTG is seeking a Technical Engineer III to support enterprise identity and access infrastructure in Buffalo, NY. The role focuses on AD and Microsoft Entra ID environments, IAM security controls, and automation using PowerShell and Graph APIs, with collaboration across security, engineering, and business teams.

The successful candidate will bring 6+ years in technical engineering, deep knowledge of authentication protocols, and experience with regulated environments.

Qualifications

• 6+ years of professional experience in technical engineering, infrastructure, systems design, or architecture.
• Advanced experience with Active Directory, Microsoft Entra ID, hybrid identity, and authentication.
• Strong knowledge of Kerberos, LDAP/LDAPS, NTLM, SAML, OAuth 2.0, OIDC, and certificate-based authentication.
• Advanced PowerShell, troubleshooting, analytical, and problem-solving skills.
• Excellent communication and collaboration skills.
• Bachelor's degree in Computer Science, Computer Engineering, or related field
• Experience with Python, Terraform, Bicep, ARM, GitLab, Azure DevOps, ServiceNow, CyberArk, or SailPoint.
• Experience with SOX, NIST, FFIEC, or NYDFS in a regulated environment.
• Financial services or enterprise identity engineering experience preferred.

Responsibilities

• Engineer and support enterprise Active Directory (AD) and Microsoft Entra ID environments.
• Manage AD forests, domains, trusts, replication, Group Policy, and Entra Connect (PHS/PTA).
• Implement Conditional Access, MFA, PAM/PIM, Zero Trust, and identity security controls.
• Develop PowerShell automation and integrate Microsoft Graph, REST APIs, JSON, and Git.
• Monitor and troubleshoot identity services using Splunk, KQL, and CrowdStrike IDP.
• Support identity lifecycle, RBAC, access governance, audit, and regulatory compliance.
• Collaborate with engineering, business, security, and vendor teams to deliver technical solutions.
• Mentor engineers and provide technical guidance.
• Serve as a technical SME for identity, authentication, and infrastructure technologies.
• Develop technical designs, standards, documentation, and implementation solutions.
• Troubleshoot complex technical issues and apply industry best practices.
• Support risk management, security, audit, and regulatory requirements.
• Mentor and coach technical staff.
• Review technical documentation, designs, and proposed changes.
• Coordinate vendor resources as needed.

Education

Bachelor's degree in Computer Science, Computer Engineering, or related field

Tools

Python

Terraform

Bicep

ARM

GitLab

Azure DevOps

ServiceNow

CyberArk

SailPoint

Job description

Are you ready to join a growing team?

CTG is seeking to fill a Technical Engineer III opening for our client.

Location: Buffalo, NY
Duration: 12 months

Primary Responsibilities

• Engineer and support enterprise Active Directory (AD) and Microsoft Entra ID environments.
• Manage AD forests, domains, trusts, replication, Group Policy, and Entra Connect (PHS/PTA).
• Implement Conditional Access, MFA, PAM/PIM, Zero Trust, and identity security controls.
• Develop PowerShell automation and integrate Microsoft Graph, REST APIs, JSON, and Git.
• Monitor and troubleshoot identity services using Splunk, KQL, and CrowdStrike IDP.
• Support identity lifecycle, RBAC, access governance, audit, and regulatory compliance.
• Collaborate with engineering, business, security, and vendor teams to deliver technical solutions.
• Mentor engineers and provide technical guidance.

Scope of Responsibilities

• Serve as a technical SME for identity, authentication, and infrastructure technologies.
• Develop technical designs, standards, documentation, and implementation solutions.
• Troubleshoot complex technical issues and apply industry best practices.
• Support risk management, security, audit, and regulatory requirements.

Supervisory/Managerial Responsibilities

• Mentor and coach technical staff.
• Review technical documentation, designs, and proposed changes.
• Coordinate vendor resources as needed.

Education and Experience Required

• 6+ years of professional experience in technical engineering, infrastructure, systems design, or architecture.
• Advanced experience with Active Directory, Microsoft Entra ID, hybrid identity, and authentication.
• Strong knowledge of Kerberos, LDAP/LDAPS, NTLM, SAML, OAuth 2.0, OIDC, and certificate-based authentication.
• Advanced PowerShell, troubleshooting, analytical, and problem-solving skills.
• Excellent communication and collaboration skills.

Education and Experience Preferred

• Bachelor's degree in Computer Science, Computer Engineering, or related field.
• Experience with Python, Terraform, Bicep, ARM, GitLab, Azure DevOps, ServiceNow, CyberArk, or SailPoint.
• Experience with SOX, NIST, FFIEC, or NYDFS in a regulated environment.
• Financial services or enterprise identity engineering experience preferred.

Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group are required.

CTG does not accept unsolicited resumes from headhunters, recruitment agencies, or fee based recruitment services for this role.

About CTG

CTG, a Cegeka company, delivers IT and business solutions that enhance clients’ digital agility, empowering them to seize new opportunities and overcome any challenge. Backed by more than 60 years’ experience and a commitment to being a reliable, results-driven partner, we work shoulder to shoulder with clients to shape digital together. Our vision is to be an indispensable partner to our clients and the preferred career destination for digital and technology experts. With more than 9,000 team members in over 15 countries, we combine global expertise with local insight to deliver innovative solutions. We operate across the Americas, Europe, and India, working with over 3,000 clients in many of today's highest-growth industries.

Together, we shape what’s next—working shoulder to shoulder to deliver impactful solutions for our clients and society. Our culture is built by the people who work at CTG, the values we hold, and the actions we take. It's a living, breathing thing that is renewed every day through the ways we engage with each other, our clients, and our communities. At CTG, you’ll find a workplace where you are encouraged to grow, supported in your ambitions, and empowered to shape your own career journey. For more information, visit www.ctg.com.

CTG will consider for employment all qualified applicants including those with criminal histories in a manner consistent with the requirements of all applicable local, state, and federal laws.

CTG is an Equal Opportunity Employer. CTG will assure equal opportunity and consideration to all applicants and employees in recruitment, selection, placement, training, benefits, compensation, promotion, transfer, and release of individuals without regard to race, creed, religion, color, national origin, sex, sexual orientation, gender identity and gender expression, age, disability, marital or veteran status, citizenship status, or any other discriminatory factors as required by law. CTG is fully committed to promoting employment opportunities for members of protected classes.