> Markdown version of [/jobs/ext/262849-active-directory-federation-service-customer-engineer](https://www.wearedevelopers.com/jobs/ext/262849-active-directory-federation-service-customer-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Active Directory Federation Service Customer Engineer - **Company:** JDA TSG - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $95,000.0 - $110,000.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Active Directory Federation Services, Adobe InDesign, Multi-Factor Authentication, Windows PowerShell, Role-Based Access Control, Server Farms, Enterprise Software Applications - **Published:** May 29, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=3465b7106304b3b6 ## About the Role Do you have experience in User training (technical support)?, * 7 - 10 years of experience in design, deploy, and configure ADFS environments (2016/2019/2022/2025) for new and existing customers, * Familiarity with Entra ID licensing tiers (Free, P1, P2) * Understand role-based access control (RBAC) concepts * Knowledge of authentication models * Basic understanding of device management concepts * Experience syncing Active Directory identities * Familiarity with Entra Password Protection * Basic understanding of Active Directory Certificate Services (AD CS) * Familiarity with Defender for Identity * Understanding of Active Directory security principles * Experience remediating security assessment findings * Ability to tune audit policies * Knowledge of event forwarding * Understanding password policy best practices, including fine-grained password policies * Experience applying security baselines ## Description We have immediate opportunities for an ADFS (Active Directory Federation Services) Expert to join our growing Customer Engineer (CE) team. These are full-time roles with comprehensive benefits. As a CE, you'll work with Fortune-1000 enterprises, guiding them to a healthy, secure identity posture across hybrid and cloud environments. As a Customer Engineer, you will collaborate directly with customer teams to provide expert advisory services across a range of technologies. By leveraging structured intellectual property (MIP) engagements, you will establish trusted advisor relationships and guide customers towards achieving a healthy and secure state. * Active Directory Federation Services Assessment Onboarding Accelerator * Migrate and Protect Applications with Entra Architecture Service * Migrate and Protect Applications with Entra Technical Blocker Mitigation * Microsoft Active Directory Show Technical Ability * Microsoft Active Directory On-Demand Assessment * Active Directory Security On-Demand Assessment - Active Directory, * Lead and execute ADFS-to-ADFS version migrations and server farm upgrades * Migrate enterprise applications and service providers from ADFS to Entra ID * Understand and assist in writing claims and Access Control Policies for Relying Party Trusts * Understand and assist in transitioning Issuance Authorization Rules to Access Control Policies * Understand and assist in setting up multifactor authentication providers for Relying Party Trusts * Collaborate with architecture and security teams to ensure secure and compliant federation designs * Perform troubleshooting of claims, authentication flows, and certificate-related issues * Support certificate rollover processes and update relying party trust metadata * Provide knowledge transfer and training to customer teams * Act as a trusted advisor in federation and hybrid identity projects * Understand multi-domain and forest design concepts * Support authentication and trust planning * Understand OU design and delegation strategies * Work with Entra Connect and directory synchronization * Use basic PowerShell for administration and automation tasks * Troubleshoot replication and authentication issues ## Related Videos - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Fireside Chat with Warren Spector & John Romero](https://www.wearedevelopers.com/videos/1406-fireside-chat-with-warren-spector-john-romero) - [MCP Mashups: How AI Agents are Reviving the Programmable Web](https://www.wearedevelopers.com/videos/1392-mcp-mashups-how-ai-agents-are-reviving-the-programmable-web) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [WeAreDevelopers LIVE – Real-Time Phone Agents, Unsafe VPNs & More](https://www.wearedevelopers.com/videos/1729-wearedevelopers-live-real-time-phone-agents-unsafe-vpns-more) - [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)