Onward Search is a specialized staffing and talent solutions company that helps professionals find top jobs with the nation’s leading brands. We’re looking to hire a Senior Authentication Engineer for a hybrid opportunity in Reston, Virginia, with a leading financial services company. This is a full-time, 6-month contract role, with on-site work required in Reston, VA; Indianapolis, IN; or Newark, DE.
Our client seeks a Senior Authentication Engineer with deep expertise in Active Directory and Microsoft Entra ID. This role will lead the transition from traditional AD to Entra ID, retire legacy federations, and modernize GPO controls into Conditional Access and Intune policies. It is ideal for a technical leader with hands-on enterprise engineering experience.
The application deadline for this role is 08/21/2025.

Senior Authentication Engineer Responsibilities:

• Hybrid Identity Management: Design and manage complex hybrid environments integrating Active Directory and Microsoft Entra ID across both on-premises and cloud platforms.
• Domain Administration: Oversee Domain Controllers, including AD Sites & Services, DNS, DHCP, and more, while planning domain lifecycle activities.
• Modern Authentication: Lead the transition from legacy identity platforms to modern authentication methods such as OAuth/OIDC and SAML.
• Cloud and Networking: Operate Windows workloads in AWS, design resilient identity topologies, and collaborate on IaaS/PaaS implementations.
• Security and Compliance: Implement robust security measures, conduct assessments, and ensure compliance with industry standards.
• Automation and Operational Excellence: Automate processes using PowerShell and Microsoft Graph API, and establish monitoring and alerting systems.
• Collaboration and Leadership: Mentor team members, lead design reviews, and support identity scenarios for both workforce and customers.

Senior Authentication Engineer Qualifications:

• Bachelor’s degree in Computer Science, Information Systems, or equivalent experience.
• Over 7 years in Identity and Access Management, with significant experience as a Domain Administrator.
• Expertise in Domain Controller administration and Microsoft Entra ID at an enterprise level.
• Proficiency in PowerShell, Microsoft Graph, and operating Windows workloads in AWS.
• Proven experience in executing migrations and decommissioning legacy systems.
• Microsoft Certified: Identity and Access Administrator Associate or equivalent certifications (preferred).
• Experience with Microsoft Defender, Google Chronicle, and modern access control models (preferred).
• Familiarity with customer identity platforms and AI/ML tools for IT operations (preferred).

Perks & Benefits:

• Medical, Dental, and Vision Insurance.
• Life Insurance.
• 401(k) Program.
• Commuter Benefit.
• eLearning & Ongoing Training.
• Education Reimbursement.
• Eligibility requires working over 30 hours per week on an assignment lasting at least 10 weeks.

If you meet the qualifications and are excited about this opportunity, apply today! Our team will connect with you to discuss next steps, support you through the interview process, and advocate for your success

• Hybrid Identity Management: Design and manage complex hybrid environments integrating Active Directory and Microsoft Entra ID across both on-premises and cloud platforms.
• Domain Administration: Oversee Domain Controllers, including AD Sites & Services, DNS, DHCP, and more, while planning domain lifecycle activities.
• Modern Authentication: Lead the transition from legacy identity platforms to modern authentication methods such as OAuth/OIDC and SAML.
• Cloud and Networking: Operate Windows workloads in AWS, design resilient identity topologies, and collaborate on IaaS/PaaS implementations.
• Security and Compliance: Implement robust security measures, conduct assessments, and ensure compliance with industry standards.
• Automation and Operational Excellence: Automate processes using PowerShell and Microsoft Graph API, and establish monitoring and alerting systems.
• Collaboration and Leadership: Mentor team members, lead design reviews, and support identity scenarios for both workforce and customers