Sign upLog in
Engineering Jobs in Jersey City, NJ

Active Directory / Entra ID / IAM Engineer

IS3 Solutions

Jersey City, NJ

Apply
JOB DETAILS
SKILLS
Access Control, Analysis Skills, Application Programming Interface (API), Authentication, Certificate Authorities, Cloud Computing, DNS (Domain Name System), Digital Certificates, Enterprise Application Integration (EAI), Enterprise Protection, Failover, Financial Control, High Availability, Identity Data Management, Incident Management, Incident Response, Internet Security, Kerberos, LDAP (Lightweight Directory Access Protocol), Microsoft Access Database, Microsoft Active Directory, Microsoft Product Family, NT LAN Manager (NTLM), Nessus, Network Operations Center, OAuth, On Call, Onboarding, Operational Improvement, Operational Support, Production Systems, Protocol Independent Multicast (PIM), Public Key Infrastructure (PKI), Python Programming/Scripting Language, Replication and Remote Mirroring, Reporting Dashboards, Security Architecture, Security Assertion Markup Language (SAML), Security Information and Event Management (SIEM), Security Policy, Single Sign-On (SSO), Splunk, Support Documentation, Testing, Use Cases, Windows PowerShell
LOCATION
Jersey City, NJ
POSTED
30+ days ago
Active Directory / Entra ID / IAM Engineer

Role Overview

We are seeking an experienced Active Directory / Entra ID / IAM Engineer to support enterprise identity and access management services across production environments. This role is focused on maintaining and enhancing on-premises and cloud-based identity infrastructure, with deep emphasis on Active Directory, Microsoft Entra ID, hybrid identity operations, authentication services, and privileged access controls.

Key Responsibilities
  • Provide day-to-day engineering and operational support for enterprise Active Directory and Entra ID environments supporting large-scale global user populations.
  • Administer, harden, and support on-premises Active Directory infrastructure including domain controller build and maintenance, DNS (SRV records), LDAP, Kerberos, NTLM, GPO, OU structure, replication, and directory health.
  • Support Microsoft Entra ID administration including Conditional Access, MFA, Identity Protection, Privileged Identity Management (PIM), app registrations, and service principal governance.
  • Maintain and support hybrid identity environments including AD Connect configuration, sync operations, failover between data center instances, and PowerShell-based sync troubleshooting.
  • Administer PKI infrastructure including certificate authority management, certificate lifecycle, LDAP signing, and certificate installation on domain controllers and services.
  • Support authentication and access solutions including SSO, federation (SAML, OIDC, OAuth2), MFA, and privileged access controls.
  • Perform enterprise application onboarding and integration with identity platforms; troubleshoot authentication, authorization, and provisioning issues.
  • Execute platform hardening aligned with Microsoft cumulative hardening guidance and enterprise security policy including SMB signing, LDAP signing, Kerberos enforcement, and legacy protocol disablement.
  • Support audit, compliance, and vulnerability remediation activities; respond to security findings from scanning tools such as Rapid7, Nessus, or CrowdStrike.
  • Partner with infrastructure, cybersecurity, and application teams to deliver identity-related changes and service improvements.
  • Develop and maintain runbooks, operational documentation, and support procedures; train follow-the-sun operations teams on repeatable workflows.
  • Participate in on-call rotations, after-hours change windows, and incident response including major incident bridge management.
  • Use PowerShell, Python, and Microsoft Graph / Entra APIs to automate operational tasks and improve efficiency. Required Skills & Experience
  • 8+ years of hands-on experience administering and supporting enterprise Active Directory including building, hardening, and directly owning domain controllers.
  • Knowledge of AD fundamentals: Kerberos and NTLM authentication protocols, DNS (SRV records), LDAP and LDAP signing, GPO design, replication, forest/domain architecture, and DC security hardening.
  • Strong experience with Microsoft Entra ID including Conditional Access, MFA, Identity Protection, PIM, app registrations, and service principal governance.
  • Hands-on experience with AD Connect in high-availability configurations including multi-data-center failover, sync troubleshooting, and PowerShell-based sync commands.
  • Experience supporting hybrid identity environments across on-premises Active Directory and Microsoft Entra ID.
  • Working knowledge of PKI infrastructure including certificate authority administration, LDAP signing, and certificate use cases on domain controllers.
  • Experience with IAM and PAM platforms such as SailPoint, Okta, and CyberArk.
  • Proficiency in PowerShell; Python and Microsoft Graph API experience preferred.
  • Experience with enterprise SIEM platforms (Splunk preferred) for log analysis, dashboard use, and incident triage.

About the Company

I

IS3 Solutions

Resume Resources

Free Resume TemplatesFree Resume Builder

Similar Job Searches

Engineering Manager Jobs in Jersey City, NJLead Engineer Jobs in Jersey City, NJField Engineer Jobs in Jersey City, NJDirector Of Engineering Jobs in Jersey City, NJResearch Engineer Jobs in Jersey City, NJReliability Engineer Jobs in Jersey City, NJChief Engineer Jobs in Jersey City, NJGeotechnical Engineer Jobs in Jersey City, NJStaff Engineer Jobs in Hoboken, NJStaff Engineer Jobs in Trinity, NY