Authentication Engineer - Entra / AD

***Permanent US residents need only apply

The Opportunity

StaffRight Associates is recruiting for an Authentication Engineer for a premier client in the highly regulated financial services sector. The role is for an identity specialist who wants to shape strategy, not just keep the lights on.

You’ll set the direction for how the organization verifies and protects identities across its on-premises directory and its Microsoft cloud. That means building standards, automating at scale, and putting modern Zero Trust protections around the company’s most sensitive administrative assets.

This is a 12-month W2 contract with the possibility of extension. It follows a hybrid schedule based in Buffalo, NY. C2C and subcontracting arrangements are not eligible.

What You’ll Do

• Establish enterprise-wide authentication frameworks and standards spanning Active Directory and Microsoft Entra ID.
• Spearhead automation efforts that modernize identity services, from crafting Conditional Access policies to hardening sign-in defenses.
• Architect hybrid identity designs built on Entra Connect, keeping on-premises AD and cloud directories securely in sync.
• Author advanced automation in PowerShell, along with Microsoft Graph integrations, to accelerate identity lifecycle and operational workflows.
• Deliver Splunk- and KQL-driven monitoring that powers identity threat hunting, incident investigations, and regulatory reporting.
• Fortify Tier-0 administration by engineering Zero Trust safeguards and a robust privileged access model.
• Resolve escalated authentication and directory service incidents through hands-on troubleshooting and incident response.
• Partner with cybersecurity colleagues to assess and close identity vulnerabilities across a heavily regulated financial landscape.
• Provision service principals and application registrations in Entra ID, and drive certificate-based and passwordless sign-in rollouts.
• Codify configuration patterns, engineering standards, and governance procedures that stand up to audit and regulatory scrutiny.

What You Bring

• Six or more years of hands-on engineering across Microsoft Entra ID and Active Directory in large enterprise settings.
• A demonstrated history of strategic identity work, such as designing standards and driving modernization, that goes well beyond day-to-day operations.
• Deep command of Hybrid Identity Architecture, including MFA, Conditional Access, Entra Connect, and federation and authorization protocols such as SAML, OAuth, and OIDC.
• Advanced PowerShell automation expertise, plus integration work with the Microsoft Graph API and REST APIs.
• Fluency in Identity Governance frameworks, Tier-0 Security Controls, and Zero Trust principles.
• Practical use of CrowdStrike, Splunk, and KQL to surface and analyze identity-based threats.
• Strong working knowledge of Certificate-Based Authentication, Kerberos, and LDAP/LDAPS.
• Preferred: a background in regulated industries governed by SOX, NIST, or FFIEC.
• Strongly preferred: certifications in Azure or Active Directory.

Compensation & Total Rewards

• Pay rate: $70–$75 per hour
• Engagement: 12-month W2 contract with potential to extend

Joining StaffRight Associates

When you partner with StaffRight Associates in your search for your next role, you’re doing more than pursuing a job, you’re aligning yourself with a team of experts committed to placing top-tier talent in truly impactful positions. We take pride in fostering professional growth and connecting forward-thinking individuals with organizations that value innovation and excellence. We look forward to showcasing your expertise in a way that resonates with our clients and opens the door to meaningful opportunities.