Technical Engineer - Identity & Access Management (IAM) -[W2 ROLE]

Title: Technical Engineer



Location: Buffalo, NY



Work Location: Seneca One Tower, 1 Seneca Street, Buffalo, NY 14203



Work Model: Hybrid 4 Days Onsite / 1 Day Remote



Duration: 12 Months / Contract-to-Hire


Position Overview

experienced Technical Engineer Identity & Access Management (IAM) to support enterprise identity, authentication, and access-management technologies.

The ideal candidate will have strong hands-on experience with Active Directory, Microsoft Entra ID, authentication technologies, identity lifecycle management, scripting, and automation . Experience working within enterprise infrastructure environments is required, while banking or financial services experience is highly preferred .

Required Qualifications

• 6+ years of relevant experience in technical engineering, infrastructure, or identity management.
• Strong hands-on experience with Active Directory (AD) .
• Strong experience with Microsoft Entra ID / Azure AD .
• Solid understanding of Identity & Access Management (IAM) .
• Experience with enterprise authentication technologies .
• Experience managing identity lifecycle processes, including:
  • User provisioning
  • Access modifications
  • Deprovisioning
• Strong scripting and automation skills, preferably PowerShell .
• Experience supporting enterprise infrastructure environments.
• Strong troubleshooting and problem-solving abilities.
• Excellent verbal and written communication skills.

Key Responsibilities

• Design, implement, maintain, and troubleshoot enterprise identity and authentication technologies.
• Administer and support Active Directory and Microsoft Entra ID environments.
• Manage identity lifecycle activities, including provisioning, access changes, and deprovisioning.
• Support enterprise authentication and access-management solutions.
• Develop and maintain scripts and automation to improve operational efficiency.
• Troubleshoot identity, authentication, and access-related issues.
• Collaborate with Security, Infrastructure, Application, and Engineering teams.
• Support technical projects, operational improvements, and enterprise initiatives.
• Participate in scheduled and occasional off-hours support activities as required.
• Follow enterprise security, operational, and technical standards.

Preferred Qualifications

• Experience in the banking or financial services industry .
• Experience with SSO, MFA, SAML, OAuth/OIDC, LDAP, or Kerberos.
• Experience with enterprise IAM and authentication platforms.
• Strong experience automating identity and infrastructure processes using PowerShell or similar scripting technologies.

Work Schedule

• Standard business hours.
• 4 days onsite / 1 day remote .
• Occasional off-hours support may be required based on business and technical needs.

Interview Process

• 2 3 technical interviews.