Active Directory Federation Service Customer Engineer

We have immediate opportunities for an ADFS (Active Directory Federation Services) Expert to join our growing Customer Engineer (CE) team. These are full-time roles with comprehensive benefits. As a CE, you’ll work with Fortune-1000 enterprises, guiding them to a healthy, secure identity posture across hybrid and cloud environments. As a Customer Engineer, you will collaborate directly with customer teams to provide expert advisory services across a range of technologies. By leveraging structured intellectual property (MIP) engagements, you will establish trusted advisor relationships and guide customers towards achieving a healthy and secure state.

• Active Directory Federation Services Assessment Onboarding Accelerator
• Migrate and Protect Applications with Entra Architecture Service
• Migrate and Protect Applications with Entra Technical Blocker Mitigation
• Microsoft Active Directory Show Technical Ability
• Microsoft Active Directory On-Demand Assessment
• Active Directory Security On-Demand Assessment - Active Directory, * Lead and execute ADFS-to-ADFS version migrations and server farm upgrades
• Migrate enterprise applications and service providers from ADFS to Entra ID
• Understand and assist in writing claims and Access Control Policies for Relying Party Trusts
• Understand and assist in transitioning Issuance Authorization Rules to Access Control Policies
• Understand and assist in setting up multifactor authentication providers for Relying Party Trusts
• Collaborate with architecture and security teams to ensure secure and compliant federation designs
• Perform troubleshooting of claims, authentication flows, and certificate-related issues
• Support certificate rollover processes and update relying party trust metadata
• Provide knowledge transfer and training to customer teams
• Act as a trusted advisor in federation and hybrid identity projects
• Understand multi-domain and forest design concepts
• Support authentication and trust planning
• Understand OU design and delegation strategies
• Work with Entra Connect and directory synchronization
• Use basic PowerShell for administration and automation tasks
• Troubleshoot replication and authentication issues

Do you have experience in User training (technical support)?, * 7 - 10 years of experience in design, deploy, and configure ADFS environments (2016/2019/2022/2025) for new and existing customers, * Familiarity with Entra ID licensing tiers (Free, P1, P2)

• Understand role-based access control (RBAC) concepts
• Knowledge of authentication models
• Basic understanding of device management concepts
• Experience syncing Active Directory identities
• Familiarity with Entra Password Protection
• Basic understanding of Active Directory Certificate Services (AD CS)
• Familiarity with Defender for Identity
• Understanding of Active Directory security principles
• Experience remediating security assessment findings
• Ability to tune audit policies
• Knowledge of event forwarding
• Understanding password policy best practices, including fine-grained password policies
• Experience applying security baselines

3.73.7 out of 5 stars Remote $95,000 - $110,000 a year - Full-time

At JDA TSG, we equip many of the world’s major brands with top-tier specialized talent, business-process expertise, and innovations that move their organizations in exciting new directions. We apply extensive due diligence up front to ensure our teams are a cultural add and can make a difference from day one. Our reputation is built on exceptional focus, flexibility, and confidence with every client we serve.