Identity Management Solutions Engineer

We are looking for an Identity Management Solutions Engineer to support complex identity and access initiatives for acquired business environments in Cincinnati, Ohio. This Long-term Contract position focuses on evaluating current identity infrastructures, shaping future-state solutions, and guiding secure migrations into standardized enterprise platforms. The role offers the opportunity to contribute as a senior hands-on engineer while also providing direction to a small domain team when needed.

Responsibilities:
• Lead identity engineering activities for assigned operating company environments, coordinating priorities, validating technical changes, and helping resolve delivery obstacles for a small team when team leadership is part of the assignment.
• Analyze existing identity ecosystems by documenting directories, domains, tenants, authentication models, federation methods, and privileged access structures to support broader integration planning.
• Create target-state identity architectures, align designs with program stakeholders, and carry approved solutions through implementation.
• Evaluate how identity changes affect connected applications, endpoint environments, service accounts, and other dependent systems so transition activities are sequenced appropriately.
• Produce effort estimates, define identity work stages, and communicate dependency timing to support integrated project plans and cutover readiness.
• Prepare migration and cutover strategies by identifying technical risks, assessing business impact, and establishing rollback approaches before implementation windows begin.
• Lead tenant-to-tenant and directory migration efforts, including identity mapping, coexistence planning, trust configuration, synchronization changes, and transition into the enterprise Microsoft 365 environment.
• Configure and maintain Entra ID and hybrid identity services, including single sign-on, enterprise applications, Conditional Access, multifactor authentication, and Entra Connect integrations.
• Rework identity integrations for applications and non-human identities by updating federation relationships, claims mappings, provisioning connections, service principals, managed identities, and service accounts using least-privilege principles.
• Develop repeatable automation for migration and administration tasks using tools such as PowerShell, Python, Microsoft Graph, cloud APIs, and infrastructure-as-code methods where appropriate.

Requirements

• Strong experience with Active Directory, including domains, forests, trusts, directory consolidation, and hybrid identity environments.
• Hands-on expertise with Microsoft Entra ID (Azure Active Directory), including SSO, Conditional Access, application registration, and tenant-to-tenant identity migration.
• Proficiency with Microsoft Windows Server in support of identity, authentication, and directory services administration.
• Experience supporting identity dependencies across Microsoft Exchange, integrated applications, and service account transitions.
• Ability to assess current-state identity environments, produce technical documentation, and design scalable target-state solutions.
• Knowledge of automation and scripting for identity operations, preferably with PowerShell, Python, Microsoft Graph, or related cloud APIs.
• Familiarity with Citrix Technologies and their interaction with enterprise identity and access management environments.
• Strong ability to evaluate migration risk, plan rollback procedures, and coordinate cutover activities across interconnected systems.