Job description

Active Directory Specialist job at Solü Technology Partners. Buffalo, NY. No C to C or Sponsorship Must be able to work hybrid from Buffalo, NY Job Summary: The Directory Services Engineer will be responsible for designing, implementing, and maintaining our Active Directory and Entra ID (Azure AD) environments. This role requires a deep understanding of directory services, identity management, and security protocols to support our banking operations. Key Responsibilities: • Design, build, and maintain Active Directory and Entra ID environments. • Manage multiple Active Directory forests and domains, ensuring high availability and performance. • Implement and manage security measures to protect directory services and related infrastructure. • Execute integrations of new domains arising from mergers and acquisitions. • Develop and maintain documentation for directory services configurations, processes, and service records. • Collaborate with IT security teams to establish and maintain security baselines and respond to security incidents. • Develop and execute PowerShell scripts for automation of tasks, system management, and troubleshooting. • Manage relevant licensing for directory services systems, ensuring compliance with legal and contractual obligations. • Support migration of PKI from Windows CA to KeyFactor. • Implement and manage OIDC/SAML authentication for systems and application access with SSO. Qualifications: • Bachelor’s degree in Computer Science, Information Technology, or a related field. • Minimum of 5 years of experience in directory services administration and engineering. • Strong experience with Active Directory, Entra ID (Azure AD), ADFS, Group Policy, OIDC/SAML, and PKI technologies. • Proficiency in using Azure DevOps/JIRA, Splunk, and PowerShell for system management. • Knowledge of ITIL practices and NIST cybersecurity standards. • Excellent problem-solving skills and the ability to work in a fast-paced environment. • Strong communication and collaboration skills. • * Knowledge of EntraID or Any Identity Providers (Ping, Opta)** • * Knowledge of Open SSO protocol** • * General IAM experience**

Requirements