Senior Active Directory Engineer(Azure Entra SSO Required)

Contract-to-Hire Opportunities
Hybrid roles requiring onsite presence three days per week. High-performing candidates may have the opportunity to move to a two-day onsite schedule after establishing trust and demonstrating success in the role.

Senior Active Directory Engineer 

Seeking Senior Active Directory Engineer with deep expertise across both on-premises and cloud identity platforms. The ideal candidate will be highly proficient in Active Directory, Azure Entra ID, and single sign-on (SSO) technologies.

Key Responsibilities:

• Support and administer on-premises Active Directory and Azure Entra ID environments.
• Design, configure, and troubleshoot SSO integrations within Entra ID (required).
• Manage Conditional Access Policies, identity security controls, and authentication frameworks.
• Provide operational support for DNS, DHCP, and IP Address Management (IPAM).
• Manage and maintain Infoblox or equivalent IPAM/DNS/DHCP solutions (required).
• Oversee certificate lifecycle management.
• Lead and support a major SSO modernization initiative, migrating from an on-premises PingFederate-based SSO platform to a cloud-based Entra ID SSO solution.
• Coordinate with internal stakeholders, application owners, infrastructure teams, and third-party vendors to ensure successful migration and adoption.

Primary Focus: The immediate priority for this role is supporting the upcoming enterprise-wide migration from PingFederate SSO to Microsoft Entra ID SSO, including planning, execution, troubleshooting, and vendor coordination.