Identity Management Solutions Engineer

We are looking for an Identity Management Solutions Engineer to support complex identity and access initiatives for acquired business environments in Cincinnati, Ohio. This Long-term Contract position focuses on evaluating current identity infrastructures, shaping future-state solutions, and guiding secure migrations into standardized enterprise platforms. The role offers the opportunity to contribute as a senior hands-on engineer while also providing direction to a small domain team when needed.Responsibilities:• Lead identity engineering activities for assigned operating company environments, coordinating priorities, validating technical changes, and helping resolve delivery obstacles for a small team when team leadership is part of the assignment.• Analyze existing identity ecosystems by documenting directories, domains, tenants, authentication models, federation methods, and privileged access structures to support broader integration planning.• Create target-state identity architectures, align designs with program stakeholders, and carry approved solutions through implementation.• Evaluate how identity changes affect connected applications, endpoint environments, service accounts, and other dependent systems so transition activities are sequenced appropriately.• Produce effort estimates, define identity work stages, and communicate dependency timing to support integrated project plans and cutover readiness.• Prepare migration and cutover strategies by identifying technical risks, assessing business impact, and establishing rollback approaches before implementation windows begin.• Lead tenant-to-tenant and directory migration efforts, including identity mapping, coexistence planning, trust configuration, synchronization changes, and transition into the enterprise Microsoft 365 environment.• Configure and maintain Entra ID and hybrid identity services, including single sign-on, enterprise applications, Conditional Access, multifactor authentication, and Entra Connect integrations.• Rework identity integrations for applications and non-human identities by updating federation relationships, claims mappings, provisioning connections, service principals, managed identities, and service accounts using least-privilege principles.• Develop repeatable automation for migration and administration tasks using tools such as PowerShell, Python, Microsoft Graph, cloud APIs, and infrastructure-as-code methods where appropriate.