About this role

Position: Senior Active Directory / Microsoft Entra ID Engineer
Duration: 1 year
Location: San Francisco, CA (hybrid)
Client: City and County of San Francisco
Work Arrangement: Remote or hybrid, depending on the specific assignment. Candidates willing to work onsite in San Francisco when required are preferred.

Required Experience:
Minimum 5 years of relevant enterprise Active Directory and Microsoft Entra ID experience.

Job Description:

Design, implement, administer, secure, and support enterprise Active Directory and Microsoft Entra ID environments.
Perform AD migrations, consolidation, and modernization involving domains, forests, GPOs, DNS, trusts, users, groups, devices, applications, and service accounts.
Support hybrid identity environments, including Azure AD Connect / Entra Connect.
Configure identity security controls, MFA, Conditional Access, Identity Protection, and privileged access.
Implement SSO and integrations with cloud and enterprise applications.
Troubleshoot authentication, synchronization, directory, and identity-related issues.
Apply security-hardening practices based on Microsoft, NIST, CIS, or comparable standards.
Develop automation using PowerShell and related Microsoft identity tools.

Preferred Skills:
Relevant Microsoft identity, Azure, security, or cloud certifications.

Active Directory / Microsoft Entra ID Engineer

Key skills

About this role