Logo for Airitos, LLC

AD/Entra Engineer - Contractor

Role overview

Qualifications

  • 5+ years of hands-on directory services engineering
  • Demonstrated experience executing AD to Entra ID migrations
  • Strong working knowledge of Entra Connect and authentication methods
  • Hands-on experience with Microsoft Intune

Responsibilities

  • Execute discovery and assessment of the on-premises Active Directory environment
  • Contribute to migration design and tool selection alongside the architect
  • Perform Entra ID configuration, identity synchronization, and authentication setup
  • Produce as-built documentation and deliver administrator training

About the company

Airitos, LLC logo

Airitos, LLC

Atlanta based IAM consulting firm with a global reach. How can we help you?

Company details

Company size2 - 10

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

Active Directory / Entra ID Migration Engineer
Remote  |  Contract (1099)  |  6 Months, Full-Time

This is a remote role. Some on-site travel to the client in Nebraska will be required at key project milestones. All travel expenses are covered by the client.

About the Role
We are looking for an experienced Active Directory and Microsoft Entra ID engineer to lead the hands-on execution of an on-premises Active Directory to Entra ID migration for a large fintech organization. Working under the direction of a solution architect, you will own the build, configuration, migration, testing, and documentation work throughout the project. This role is well-suited for a deeply technical engineer who is comfortable operating with ambiguity in a complex enterprise environment and who has migrated real AD estates before. Experience in banking, financial services, or other regulated industries is a strong plus.

Key Responsibilities
  • Execute discovery and assessment of the on-premises Active Directory environment and Microsoft 365 tenant, and document findings and dependencies
  • Contribute to migration design and tool selection alongside the architect
  • Perform Entra ID configuration, identity synchronization, and authentication setup
  • Run test migrations, then migrate and validate users, groups, and service accounts
  • Configure identity security controls including MFA, Conditional Access, and self-service password reset
  • Support endpoint and device management integration through Microsoft Intune
  • Produce as-built documentation and deliver administrator training and operational handoff
Required Qualifications
  • 5+ years of hands-on directory services engineering, including extensive experience supporting and troubleshooting on-premises Active Directory (authentication, DFS, GPO, LDAP)
  • Demonstrated experience executing AD to Entra ID migrations in complex enterprise environments
  • Strong working knowledge of Entra Connect and authentication methods (Password Hash Sync, Pass-through Authentication, ADFS)
  • Hands-on experience with Microsoft Intune, including device compliance and Entra ID Join and Hybrid Join
  • Experience with Conditional Access, MFA, and identity protection in a cloud-first model
  • Solid grasp of AD security, common vulnerabilities and safeguards, and Tier-0 security boundaries
  • Understanding of modern authentication (OIDC, SAML, Kerberos) and access control models (RBAC, PBAC, ABAC)
  • Working familiarity with Azure environments
  • Ability to author technical documentation and conduct knowledge transfer sessions
Preferred Qualifications
  • Experience planning and running phased migration waves with defined pilot cohorts and rollback criteria
  • Familiarity with GPO-to-Intune policy migration
  • Experience with certificate services and cloud PKI approaches
  • Prior work in financial services or other highly regulated industries
  • Bachelor's degree in Computer Science or equivalent training, education, and work experience
Contractor Requirements
  • Must be based in the United States and authorized to work without sponsorship
  • Must be available for occasional on-site travel (expenses covered by the client)
  • Must be able to pass a background check

Apply once. Then go straight to the hiring manager.

After you apply, unlock the direct contact details of the people who actually make the call. A quick follow-up makes you 5x more likely to land an interview.

MR

Marcus Rivera

Chief Revenue Officer

m.rivera@company.com
linkedin.com/in/marcusrivera
Unlocked after you apply
·

Digital Advertising Specialist Related jobs

Other jobs at Airitos, LLC

Premium

Reach out to the hiring manager directly.

Gain access to the contact details of the hiring managers who actually decide, and reach out to network with them directly. That, plus more when you upgrade:

  • Full match report with fit score and gaps
  • Career diagnostics on how recruiters read you
  • Curated company matches and warm intros
  • 48h early access to new roles

Cancel anytime.