Sr. Active Directory/Identity Engineer

Job Title: Sr. Active Directory/Identity Engineer

Location: New York City, NY (3 days onsite)

Duration: 12 Month Engagement

Role Overview:

Seeking a senior-level Identity & Web Authentication Engineer to support enterprise production services environments. This role combines Active Directory / Azure Entra identity administration with web authentication and federation technologies, supporting critical applications and services in a highly available, security-focused environment.

The ideal candidate is a well-rounded identity professional with strong operational experience across identity, authentication, and access platforms, emphasizing production stability and customer-facing support.

Key Responsibilities:

• Provide hands-on operational support for enterprise identity and authentication platforms in a production environment.
• Administer and support on-prem Active Directory and Azure Entra ID, including identity lifecycle, group policy, MFA, conditional access, RBAC, SSO, and federation.
• Support web authentication and access management platforms including CA SiteMinder, Ping Directory, SAML, OAuth2, OIDC, Kerberos, and related standards.
• Support onboarding and integration of applications with enterprise MFA and SSO solutions.
• Partner with application and platform teams to troubleshoot authentication issues and guide secure access implementations.
• Participate in on-call rotations, after-hours change windows, and incident response activities.
• Execute platform upgrades, configuration changes, and routine maintenance with a focus on stability and security.
• Develop and maintain runbooks, documentation, and operational procedures.
• Perform root cause analysis and contribute to post-incident reviews.
• Identify opportunities to automate operational tasks using PowerShell and/or Python.
• Ensure identity and authentication services align with enterprise security standards and compliance controls.

Required Skills & Experience:

• 8+ years supporting enterprise identity and authentication platforms in production environments.
• Strong hands-on experience with Active Directory (on-prem) administration and LDAP.
• Experience with Azure Entra ID including MFA, conditional access, and SSO.
• Experience with federation and web authentication standards (SAML, OAuth2, OIDC).
• Working experience with CA SiteMinder and/or Ping Directory.
• Experience supporting authentication services across Linux/Unix and Windows platforms.
• Proficiency in PowerShell scripting; Python preferred.
• Strong troubleshooting skills in complex, multi-application environments.
• Strong communication skills with the ability to engage directly with stakeholders.