Sr. Active Directory Entra ID Engineer

Job Description

Sr Active Directory / Entra ID Engineer

Sr Active Directory / Entra Engineer POSITION SUMMARY
We are seeking a Senior Active Directory / Entra Contractor position to serve as the technical authority for Customer enterprise identity and directory services. This role owns the architecture, design, and engineering of our on-premises Active Directory and Microsoft Entra ID (Azure AD) environments, ensuring a secure, highly available, and standards-based hybrid identity platform.
This engineer will architect identity solutions from the ground up - designing forest and tenant strategies, leading migrations and consolidations, and hardening the identity fabric against modern threats. The ideal candidate blends deep hands-on directory expertise with the ability to translate business requirements into scalable, well-documented reference architectures.
Sr Active Directory / Entra Engineer KEY RESPONSIBILITIES
Architecture & Design

• Design and own enterprise Active Directory and Entra ID architectures, including forest and domain design, tenant strategy, organizational unit structure, and Group Policy frameworks.
• Produce reference architectures, design documents, and standards that guide the build-out and ongoing evolution of the enterprise identity platform.
• Define the target-state hybrid identity model, including directory synchronization, authentication methods, and coexistence strategy.

Entra ID & Cloud Identity

• Engineer and administer Microsoft Entra ID, including Conditional Access, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and application registrations.
• Configure and optimize Entra Connect and hybrid identity synchronization, password hash sync, pass-through authentication, and federation.
• Advance the organization toward a Zero Trust identity model across cloud and on-premises resources.

Migrations & Consolidations

• Lead tenant-to-tenant (T2T), domain, and on-premises migrations and consolidations, including planning, sequencing, and execution.
• Perform current-state discovery of identities, groups, mailboxes, and access dependencies, and translate findings into migration plans.
• Utilize enterprise migration tooling such as Quest On Demand Migration, ShareGate, and native Microsoft tooling.

Security & Governance

• Harden Active Directory and Entra ID against modern identity threats, applying tiered administration, privileged access controls, and secure baselines.
• Implement and manage Privileged Identity Management (PIM), identity governance, access reviews, and least-privilege models.
• Support certificate services and public key infrastructure (PKI), auditing, and compliance requirements as they relate to identity.
• Partner with the Security team on incident response, remediation, and continuous improvement of the identity security posture.

Operations & Collaboration

• Serve as the senior escalation point for complex directory, authentication, and access issues.
• Automate operational tasks and reporting using PowerShell and the Microsoft Graph API.
• Document standards and mentor junior engineers, elevating the team's identity engineering capability.

Sr Active Directory / Entra Engineer REQUIRED QUALIFICATIONS

• Seven or more years of enterprise experience engineering and supporting Active Directory, with demonstrated ability to architect AD solutions end to end.
• Deep expertise with Microsoft Entra ID, hybrid identity, and Entra Connect in large, complex environments.
• Proven track record designing and executing directory migrations and consolidations, including tenant-to-tenant scenarios.
• Strong command of identity security concepts: Conditional Access, MFA, PIM, tiered administration, and Zero Trust principles.
• Advanced PowerShell scripting and automation skills, and familiarity with the Microsoft Graph API.
• Excellent documentation skills and the ability to communicate complex identity designs to technical and business stakeholders.

Sr Active Directory / Entra Engineer PREFERRED QUALIFICATIONS

• Relevant certifications such as Microsoft Certified: Identity and Access Administrator Associate (SC-300), Azure Solutions Architect Expert, or Enterprise Administrator Expert.
• Experience with Active Directory Certificate Services (AD CS) and enterprise PKI.
• Familiarity with Microsoft Purview, Intune, and endpoint identity integration.
• Exposure to identity governance platforms and third-party migration tooling such as Quest, ShareGate, and PowerSyncPro.

#RT
#DICEJOBS

Job Requirements

Active Directory,Entra ID

Meet Your Recruiter



I'm happy to connect with you on your next career challenge. Whatever your needs are, we at Resolution Technologies promise to provide unrivaled quality and service. Please don't hesitate to contact me if you have any questions about this position.

*Warning* Please beware of job offer scams! Individuals falsely representing themselves as employees of Resolution Technologies and many other recruiting firms are contacting candidates with fake job offers. Please do not provide these individuals with any information and report them to your local authorities. We are not affiliated with Nick Hassan, Nick Sullivan, or the email domain resolutiontech-jobs.com. Please call us at to verify job opportunities.