Senior Entra ID / Active Directory Migration Engineer

Senior Entra ID / Active Directory Migration Engineer

Location: Newtown Square, PA (Onsite 3 Days per Week) Duration: 6–12+ Months Contract (Potential Extension or Full-Time Conversion)

Job Description

We are seeking an experienced Entra ID / Active Directory Engineer to support an enterprise SSO migration project, transitioning 100+ applications from PingFederate to Microsoft Entra ID. The candidate will also be responsible for Active Directory administration, authentication integrations, and identity infrastructure support.

Roles & Responsibilities

• Lead the migration of 100+ applications from PingFederate SSO to Microsoft Entra ID.
• Configure and migrate SSO connectors, authentication methods, and enterprise application integrations.
• Customize SSO integrations, including user roles, claims, and predefined authentication attributes.
• Work with PingFederate vendors, application teams, and third-party vendors to coordinate migration activities.
• Perform SSO integration testing, validation, troubleshooting, and production cutovers.
• Administer and support on-premises Active Directory on Windows Server 2022.
• Manage Microsoft Entra ID policies, configurations, authentication, and access controls.
• Support Windows Certificate Services, DNS, IP address management (IPAM), and related infrastructure.
• Support Active Directory ransomware recovery and identity infrastructure recovery processes.

Requirements

• Strong hands-on experience with Microsoft Entra ID (Azure AD).
• Strong hands-on experience with Active Directory Administration.
• Experience with PingFederate SSO migration and integration.
• Strong knowledge of SAML 2.0 and OpenID Connect (OIDC).
• Enterprise Application integration and authentication configuration.
• Single Sign-On (SSO) implementation and troubleshooting.
• DNS and IP Address Management (IPAM).
• Windows Server 2022 and Windows Certificate Services.
• Identity and Access Management (IAM) and authentication policies.