Senior IAM Engineer
Remote
Contract Position (6 months, initially)
Pay rate: $65-$70/hour (depending on experience)


The Planet Group has partnered with Midwest based company to locate an experienced Identity & Access Management Engineer to support and enhance a large-scale Microsoft identity environment spanning both traditional on-premises infrastructure and Azure cloud services.

This position will have hands-on responsibility for the technologies that control how users authenticate and access enterprise systems, with particular emphasis on Active Directory, Microsoft Entra ID, Conditional Access, and PowerShell automation.

The ideal candidate has strong experience in both sides of a hybrid Microsoft environment: someone who understands the underlying mechanics of Active Directory while also being comfortable implementing modern cloud identity and security capabilities within Entra ID.
What You'll Be Doing

• Engineer, administer, and support Microsoft identity services across on-premises and cloud environments.
• Maintain Active Directory infrastructure, including domain controllers, DNS, replication, Sites and Services, and related directory components.
• Create and manage Group Policy to support security, configuration, and operational requirements.
• Administer Microsoft Entra ID and support identity lifecycle, access, governance, and security functions.
• Design and maintain Conditional Access policies that balance security requirements with business and application needs.
• Develop PowerShell scripts and automation to streamline identity administration, reporting, compliance, and repetitive operational tasks.
• Support synchronization and integration between on-premises Active Directory and Microsoft Entra ID.
• Implement and maintain modern authentication capabilities, including Single Sign-On and Multi-Factor Authentication.
• Diagnose complex authentication, authorization, synchronization, and directory-related issues.
• Monitor the health, availability, and security of enterprise identity services.
• Partner with cybersecurity and infrastructure teams on identity security initiatives and access controls.
• Participate in incident investigation, root-cause analysis, remediation, and ongoing platform improvements.
• Maintain technical documentation covering configurations, processes, standards, and operational procedures.

• Strong hands-on experience administering enterprise Active Directory environments.
• Experience supporting domain controllers, DNS integration, AD Sites and Services, and replication.
• Strong knowledge of Group Policy administration and troubleshooting.
• Significant hands-on experience with Microsoft Entra ID.
• Demonstrated experience creating and administering Conditional Access policies.
• Advanced PowerShell scripting and automation skills.
• Experience supporting hybrid Microsoft identity environments.
• Experience working within Microsoft Azure and Microsoft 365 environments.
• Strong understanding of authentication, authorization, identity security, and access-management principles.
• Ability to troubleshoot complex identity and directory issues across interconnected on-premises and cloud systems.

• Microsoft Entra Connect or Cloud Sync
• Privileged Identity Management (PIM)
• Microsoft Intune
• Multi-Factor Authentication implementations
• Single Sign-On integrations
• SAML, OAuth 2.0, and OpenID Connect
• Identity governance and privileged-access controls
• Enterprise security or Zero Trust initiatives

#LI-SC1
#REMOTE

#TECH