> Markdown version of [/jobs/ext/2814729-authentication-engineer](https://www.wearedevelopers.com/jobs/ext/2814729-authentication-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Authentication Engineer

- **Company:** Propertyvalue Lighthouse Technology Services
- **Location:** Buffalo, NY, United States
- **Experience:** Expert
- **Salary:** $145,600.0 - $156,000.0
- **Contract:** Temporary to permanent
- **Skills:** Active Directory, Application Programming Interfaces (APIs), User Authentication, Authentication Protocols, Microsoft Azure, Multi-Factor Authentication, Identity and Access Management, Intrusion Detection and Prevention, Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, Windows PowerShell, Azure Active Directory, Kusto Query Language, Zero Trust Network Access, Security Assertion Markup Language (SAML), Cloud Platform System, Falcon Platform, Tools for Reporting, Restful APIs, Splunk, Api Management
- **Published:** September 10, 2026
- **Apply:** https://www.dice.com/job-detail/26f9f6a2-e7f5-41de-9a41-baf2d69ea6a3

## About the Role

* 6+ years of hands-on experience engineering both Active Directory and Microsoft Entra ID in enterprise environments
 * Proven track record of strategic identity engineering beyond operational tasks, with demonstrated ability to design standards and modernization initiatives
 * Deep expertise in hybrid identity architecture including Entra Connect, Conditional Access, MFA, and authentication protocols (SAML, OAuth, OIDC)
 * Advanced PowerShell scripting and automation skills, with experience in Microsoft Graph API and REST API integration
 * Strong understanding of Zero Trust principles, Tier-0 security controls, and Identity Governance frameworks
 * Experience with monitoring and analytics tools such as Splunk, KQL, and CrowdStrike for identity threat detection
 * Solid knowledge of authentication technologies including Kerberos, LDAP/LDAPS, and certificate-based authentication
 * Background working in regulated environments with compliance frameworks such as SOX, NIST, or FFIEC preferred
 * Active Directory and Azure certifications highly preferred

## Description

Lighthouse Technology Services is partnering with our client to fill their Authentication Engineer specializing in AD and Entra position! This is a 12 month contract with potential to extend and will be hybrid in Buffalo, NY.

This role will be a W2 employee of Lighthouse Technology Services. No C2C or subcontracting arrangements will be considered.

What You'll Be Doing:

 * Design and implement strategic authentication frameworks and standards for enterprise Active Directory and Microsoft Entra ID environments
 * Lead automation initiatives to modernize identity services, including Conditional Access policy development and authentication hardening
 * Architect hybrid identity solutions leveraging Entra Connect, ensuring secure synchronization between on-premises AD and cloud environments
 * Develop advanced PowerShell scripts and Microsoft Graph API integrations to streamline identity lifecycle management and operational processes
 * Build and maintain monitoring solutions using Splunk and KQL for identity threat detection, incident investigation, and compliance reporting
 * Engineer Zero Trust security controls and Privileged Access Management frameworks to protect Tier-0 administration
 * Support incident management and troubleshooting for complex authentication and directory services issues
 * Collaborate with cybersecurity teams to evaluate and remediate identity vulnerabilities in regulated financial services environment
 * Create app registrations and service principals within Entra ID while managing certificate-based and passwordless authentication implementations
 * Document technical standards, configuration patterns, and governance processes for audit and compliance requirements


## Related Videos

- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Going Beyond Passwords: The Future of User Authentication](https://www.wearedevelopers.com/videos/714-going-beyond-passwords-the-future-of-user-authentication)
- [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The top 200 passwords of 2024 can be cracked in less than a second](https://www.wearedevelopers.com/magazine/502-the-top-200-passwords-of-2024-can-be-cracked-in-less-than-a-second)
- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)