AD​/Entra Engineer – Contractor

Responsibilities

• Execute discovery and assessment of the on-premises Active Directory environment and Microsoft 365 tenant, and document findings and dependencies
• Contribute to migration design and tool selection alongside the architect
• Perform Entra , identity synchronization, and authentication setup
• Run test migrations, then migrate and validate users, groups, and service accounts
• Configure identity security controls including MFA, Conditional Access, and self‑service password reset
• Support endpoint and device management integration through Microsoft Intune
• Produce as‑built documentation and deliver administrator training and operational handoff

• 5+ years of hands‑on directory services engineering, including extensive experience supporting and troubleshooting on‑premises Active Directory (authentication, DFS, GPO, LDAP)
• Demonstrated experience executing AD to Entra  in complex enterprise environments
• Strong working knowledge of Entra Connect and authentication methods (Password Hash Sync, Pass‑through Authentication, ADFS)
• Hands‑on experience with Microsoft Intune, including device compliance and Entra  and Hybrid Join
• Experience with Conditional Access, MFA, and identity protection in a cloud‑first model
• Solid grasp of AD security, common vulnerabilities and safeguards, and Tier‑0 security boundaries
• Understanding of modern authentication (OIDC, SAML, Kerberos) and access control models (RBAC, PBAC, ABAC)
• Working familiarity with Azure environments
• Ability to author technical documentation and conduct knowledge transfer sessions
• Must be based in the United States and authorized to work without sponsorship
• Must be available for occasional on‑site travel (expenses covered by the client)
• Must be able to pass a background check

Demonstrates extensive expertise in directory services engineering, particularly in executing Active Directory to Entra , configuring identity security controls, and managing Microsoft Intune for device compliance. Proficient in authoring technical documentation and conducting training sessions for operational handoff.