Technical Engineer III

Computer Task Group, Inc; Buffalo (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

CTG, a Cegeka company, is seeking a Senior Identity Engineer in Buffalo, NY to engineer and support enterprise AD and Microsoft Entra ID environments. You will manage forests, domains, trusts, replication, GPOs, and Entra Connect, and implement Conditional Access, MFA, PAM/PIM, and Zero Trust controls.

The role emphasizes PowerShell automation, integration with Microsoft Graph, REST APIs, JSON, and Git; plus monitoring identity services with Splunk and KQL.

Qualifications

• 6+ years of professional experience in technical engineering, infrastructure, systems design, or architecture.
• Advanced experience with Active Directory, Microsoft Entra ID, hybrid identity, and authentication.
• Strong knowledge of Kerberos, LDAP/LDAPS, NTLM, SAML, OAuth 2.0, OIDC, and certificate-based authentication.
• Advanced PowerShell, troubleshooting, analytical, and problem-solving skills.
• Excellent communication and collaboration skills.

Responsibilities

• Engineer and support enterprise AD and Entra ID environments.
• Manage AD forests, domains, trusts, replication, GPO, and Entra Connect.
• Implement Conditional Access, MFA, PAM/PIM, Zero Trust.
• Develop PowerShell automation and integrate Graph, REST APIs, JSON, and Git.
• Monitor identity services with Splunk, KQL, and CrowdStrike IDP.
• Collaborate with engineering, business, security, and vendor teams.
• Mentor engineers and provide technical guidance.

Skills

Active Directory

Microsoft Entra ID

PowerShell

Identity & access management

Troubleshooting

Communication

Analytical thinking

Education

Bachelor's degree in Computer Science or related field

Tools

GitLab

Azure DevOps

ServiceNow

CyberArk

SailPoint

Terraform

Python

Bicep

ARM

Job description

Location: Buffalo, NY

Duration: 12 months

Primary Responsibilities:

• Engineer and support enterprise Active Directory (AD) and Microsoft Entra ID environments.
• Manage AD forests, domains, trusts, replication, Group Policy, and Entra Connect (PHS/PTA).
• Implement Conditional Access, MFA, PAM/PIM, Zero Trust, and identity security controls.
• Develop PowerShell automation and integrate Microsoft Graph, REST APIs, JSON, and Git.
• Monitor and troubleshoot identity services using Splunk, KQL, and CrowdStrike IDP.
• Support identity lifecycle, RBAC, access governance, audit, and regulatory compliance.
• Collaborate with engineering, business, security, and vendor teams to deliver technical solutions.
• Mentor engineers and provide technical guidance.

Scope of Responsibilities:

• Serve as a technical SME for identity, authentication, and infrastructure technologies.
• Develop technical designs, standards, documentation, and implementation solutions.
• Troubleshoot complex technical issues and apply industry best practices.
• Support risk management, security, audit, and regulatory requirements.

Supervisory/Managerial Responsibilities:

• Mentor and coach technical staff.
• Review technical documentation, designs, and proposed changes.
• Coordinate vendor resources as needed.

Education and Experience Required:

• 6+ years of professional experience in technical engineering, infrastructure, systems design, or architecture.
• Advanced experience with Active Directory, Microsoft Entra ID, hybrid identity, and authentication.
• Strong knowledge of Kerberos, LDAP/LDAPS, NTLM, SAML, OAuth 2.0, OIDC, and certificate-based authentication.
• Advanced PowerShell, troubleshooting, analytical, and problem-solving skills.
• Excellent communication and collaboration skills.

Education and Experience Preferred:

• Bachelor's degree in Computer Science, Computer Engineering, or related field.
• Experience with Python, Terraform, Bicep, ARM, GitLab, Azure DevOps, ServiceNow, CyberArk, or SailPoint.
• Experience with SOX, NIST, FFIEC, or NYDFS in a regulated environment.
• Financial services or enterprise identity engineering experience preferred.

Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group are required.

CTG does not accept unsolicited resumes from headhunters, recruitment agencies, or fee based recruitment services for this role.

About CTG

CTG, a Cegeka company, delivers IT and business solutions that enhance clients’ digital agility, empowering them to seize new opportunities and overcome any challenge. Backed by more than 60 years’ experience and a commitment to being a reliable, results-driven partner, we work shoulder to shoulder with clients to shape digital together. Our vision is to be an indispensable partner to our clients and the preferred career destination for digital and technology experts. With more than 9,000 team members in over 15 countries, we combine global expertise with local insight to deliver innovative solutions. We operate across the Americas, Europe, and India, working with over 3,000 clients in many of today's highest-growth industries.

Together, we shape what’s next—working shoulder to shoulder to deliver impactful solutions for our clients and society. Our culture is built by the people who work at CTG, the values we hold, and the actions we take. It’s a living, breathing thing that is renewed every day through the ways we engage with each other, our clients, and our communities. At CTG, you’ll find a workplace where you are encouraged to grow, supported in your ambitions, and empowered to shape your own career journey. For more information, visit www.ctg.com .

CTG will consider for employment all qualified applicants including those with criminal histories in a manner consistent with the requirements of all applicable local, state, and federal laws.

CTG is an Equal Opportunity Employer. CTG will assure equal opportunity and consideration to all applicants and employees in recruitment, selection, placement, training, benefits, compensation, promotion, transfer, and release of individuals without regard to race, creed, religion, color, national origin, sex, sexual orientation, gender identity and gender expression, age, disability, marital or veteran status, citizenship status, or any other discriminatory factors as required by law. CTG is fully committed to promoting employment opportunities for members of protected classes.