Technical Engineer III

Are you ready to join a growing team?

CTG is seeking to fill a Technical Engineer III opening for our client.

Location: Buffalo, NY
Duration: 12 months

Primary Responsibilities:

• Engineer and support enterprise Active Directory (AD) and Microsoft Entra ID environments.
• Manage AD forests, domains, trusts, replication, Group Policy, and Entra Connect (PHS/PTA).
• Implement Conditional Access, MFA, PAM/PIM, Zero Trust, and identity security controls.
• Develop PowerShell automation and integrate Microsoft Graph, REST APIs, JSON, and Git.
• Monitor and troubleshoot identity services using Splunk, KQL, and CrowdStrike IDP.
• Support identity lifecycle, RBAC, access governance, audit, and regulatory compliance.
• Collaborate with engineering, business, security, and vendor teams to deliver technical solutions.
• Mentor engineers and provide technical guidance.

Scope of Responsibilities:

• Serve as a technical SME for identity, authentication, and infrastructure technologies.
• Develop technical designs, standards, documentation, and implementation solutions.
• Troubleshoot complex technical issues and apply industry best practices.
• Support risk management, security, audit, and regulatory requirements.

Supervisory/Managerial Responsibilities:

• Mentor and coach technical staff.
• Review technical documentation, designs, and proposed changes.
• Coordinate vendor resources as needed.

Education and Experience Required:

• 6+ years of professional experience in technical engineering, infrastructure, systems design, or architecture.
• Advanced experience with Active Directory, Microsoft Entra ID, hybrid identity, and authentication.
• Strong knowledge of Kerberos, LDAP/LDAPS, NTLM, SAML, OAuth 2.0, OIDC, and certificate-based authentication.
• Advanced PowerShell, troubleshooting, analytical, and problem-solving skills.
• Excellent communication and collaboration skills.

Education and Experience Preferred:

• Bachelor's degree in Computer Science, Computer Engineering, or related field.
• Experience with Python, Terraform, Bicep, ARM, GitLab, Azure DevOps, ServiceNow, CyberArk, or SailPoint.
• Experience with SOX, NIST, FFIEC, or NYDFS in a regulated environment.
• Financial services or enterprise identity engineering experience preferred.

Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group are required.

CTG does not accept unsolicited resumes from headhunters, recruitment agencies, or fee based recruitment services for this role.

To Apply:
To be considered, please apply directly to this requisition using the link provided. Kindly forward this to any other interested parties. Thank you!