JOB SUMMARY-The ADFS Customer Engineer serves as a trusted advisor to enterprise customers, providing technical guidance, migration support, and operational expertise across Active Directory Federation Services (ADFS), Active Directory, and Microsoft Entra ID. The role focuses on identity modernization, federation services, hybrid identity solutions, and security best practices.ResponsibilitiesDesign, deploy, configure, and support ADFS environments.Lead ADFS upgrades, migrations, and modernization initiatives, including migrations to Microsoft Entra ID.Configure and manage claims-based authentication, Access Control Policies, Relying Party Trusts, MFA integrations, and federation services.Troubleshoot authentication, federation, certificate, and identity synchronization issues.Support Active Directory architecture, authentication, trust relationships, and Entra Connect synchronization.Assess and improve identity security posture through remediation of security findings and implementation of best practices.Collaborate with customer infrastructure, security, and architecture teams to deliver secure and compliant identity solutions.Deliver technical guidance, knowledge transfer, and operational readiness support.QualificationsAdvanced (Required)Active Directory Federation Services (ADFS)ADFS migrations, upgrades, and modernizationClaims-based authentication and federationAccess Control Policies and Relying Party TrustsMicrosoft Entra Connect and Hybrid IdentityMFA integration and authentication troubleshootingCertificate management and federation security5+ years of experience supporting Active Directory and ADFS environments.Experience delivering enterprise identity, federation, or hybrid identity projects.Strong troubleshooting and problem-solving skills.Experience working directly with customers in a consulting, advisory, or support capacity.Intermediate (Required)Active Directory Domain Services (AD DS)Multi-domain and multi-forest environmentsAuthentication and trust designMicrosoft Entra ID (Free, P1, P2)Identity synchronization and lifecycle managementActive Directory security assessments and remediationPreferredMicrosoft Defender for IdentityActive Directory Certificate Services (AD CS)Entra Password ProtectionAudit policy, event forwarding, and security monitoringPowerShell automationPreferred CertificationsSC-300: Microsoft Identity and Access AdministratorAZ-104: Microsoft Azure AdministratorMicrosoft Certified Trainer (MCT)MCSE (or equivalent experience)CISSP or comparable security certification
5 days ago