We are seeking an Authentication Engineer to design, implement, and maintain enterprise identity infrastructure in a contract role based in Buffalo, New York. This is a 12+ month engagement requiring deep expertise in Active Directory and Microsoft Entra ID within complex, regulated environments. Responsibilities Design and engineer hybrid identity architecture solutions, including Entra Connect, Conditional Access, and multi-factor authentication implementations Develop and execute strategic identity modernization initiatives and standards beyond day-to-day operational tasks Create and maintain PowerShell automation scripts and integrate Microsoft Graph API and

REST API

solutions to streamline identity management processes Implement and monitor Zero Trust security principles and Tier-0 security controls across identity infrastructure Configure and optimize authentication protocols including SAML, OAuth, OIDC, Kerberos, and

LDAP/LDAPS

Establish identity governance frameworks and ensure compliance with regulatory requirements Monitor identity systems using tools such as Splunk, KQL, and CrowdStrike to detect and respond to threats Collaborate with security and infrastructure teams to maintain enterprise authentication standards Qualifications Required 6+ years of hands-on experience engineering Active Directory and Microsoft Entra ID in enterprise environments Proven track record designing strategic identity solutions and modernization initiatives Deep expertise in hybrid identity architecture, Entra Connect, Conditional Access, MFA, and authentication protocols (SAML, OAuth, OIDC) Advanced PowerShell scripting and automation capabilities with experience in Microsoft Graph API and

REST API

integration Strong understanding of Zero Trust principles, Tier-0 security controls, and Identity Governance frameworks Solid knowledge of authentication technologies including Kerberos, LDAP/LDAPS, and certificate-based authentication Experience with monitoring and analytics tools such as Splunk, KQL, and CrowdStrike for identity threat detection Preferred Background working in regulated environments with compliance frameworks such as SOX, NIST, or FFIEC Active Directory and Azure certifications