Lead Microsoft Infrastructure & Entra Engineer

Responsibilities Kforce has a client in Holyoke, MA that is seeking a Lead Microsoft Infrastructure & Entra Engineer. Responsibilities: • Lead deployment and migration projects across Entra ID (Azure AD), Microsoft 365, and on-premises Windows Server environments • Engineer and automate solutions using PowerShell, Ansible, or Terraform to ensure efficiency and repeatability • Implement advanced identity and access management (IAM) solutions with Microsoft Entra • Apply conditional access, MFA, role-based access control (RBAC), and identity protection policies • Develop hybrid identity strategies integrating cloud and on-premises directories • Create secure, scalable architectures following Microsoft best practices and Zero Trust principles • Continuously assess existing environments, identify areas for improvement, and implement optimization initiatives. • Provide clear, informed recommendations that balance business needs, security and cost efficacy • Participate in paid, on-call rotation Requirements • Bachelor of Science in Computer Science, Management Information Systems, Information Security, Cyber Security or related fields, or significant relevant job experience • Microsoft Cloud, PMP, ITIL certifications a plus • 5+ years of progressive project management, Working with one or more IT concepts such as DevOps, Agile, ITIL, etc. • Deep hands-on experience with Microsoft Entra ID (Azure AD), Microsoft 365, Azure Cloud and Windows Server (2012 R2 - 2025) • Fluency in PowerShell, Terraform, Desired State Configuration methodologies • Strong background in Active Directory, Group Policy, Certificate Services • Skilled in hybrid identity, federation and synchronization (AAD Connect/Entra Connect) • Experience with Microsoft Exchange (on-prem and online), as well as data protection and compliance tools associated with the same • Familiarity with Azure IaaS/Paas, PowerShell & Terraform scripting, and automation frameworks • Proven ability to translate business requirements into resilient, secure and scalable technical solutions • Demonstrated sound judgment and decision-making in complex, multi-stakeholder environments • Self-motivated, organized, able to work dependently under pressure • Exceptional analytical and problem-solving abilities • Experience employing Ansible Automation Platform as a configuration management technology, and/or code management using GIT, CI/CD a plus The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future. We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave. Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law. This job is not eligible for bonuses, incentives or commissions. Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. By clicking “Apply Today” you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.