Senior Active Directory Engineer(Azure Entra SSO Required)

About the role

Contract-to-hire opportunity for a Senior Active Directory Engineer with deep expertise across both on-premises and cloud identity platforms. The ideal candidate will be highly proficient in Active Directory, Azure Entra ID, and single sign-on (SSO) technologies. The immediate priority is supporting the upcoming enterprise-wide migration from PingFederate SSO to Microsoft Entra ID SSO, including planning, execution, troubleshooting, and vendor coordination.

Responsibilities

• Support and administer on-premises Active Directory and Azure Entra ID environments
• Design, configure, and troubleshoot SSO integrations within Entra ID (required)
• Manage Conditional Access Policies, identity security controls, and authentication frameworks
• Provide operational support for DNS, DHCP, and IP Address Management (IPAM)
• Manage and maintain Infoblox or equivalent IPAM/DNS/DHCP solutions (required)
• Oversee certificate lifecycle management
• Lead and support a major SSO modernization initiative, migrating from an on-premises PingFederate-based SSO platform to a cloud-based Entra ID SSO solution
• Coordinate with internal stakeholders, application owners, infrastructure teams, and third-party vendors to ensure successful migration and adoption

Requirements

• Deep expertise in on-premises Active Directory and Azure Entra ID
• High proficiency with single sign-on (SSO) technologies
• Hands-on experience designing, configuring, and troubleshooting SSO integrations within Entra ID
• Experience managing Conditional Access Policies, identity security controls, and authentication frameworks
• Operational knowledge of DNS, DHCP, and IP Address Management (IPAM)
• Experience with Infoblox or equivalent IPAM/DNS/DHCP solutions
• Certificate lifecycle management experience
• Proven ability to lead SSO modernization/migration initiatives (PingFederate to Entra ID a plus)
• Strong stakeholder coordination skills across application owners, infrastructure teams, and third-party vendors

Schedule

Hybrid role requiring onsite presence three days per week. High-performing candidates may have the opportunity to move to a two-day onsite schedule after establishing trust and demonstrating success in the role.

Primary Focus

The immediate priority for this role is supporting the upcoming enterprise-wide migration from PingFederate SSO to Microsoft Entra ID SSO, including planning, execution, troubleshooting, and vendor coordination.