1

Microsoft Forefront Identity Manager Engineer Jobs

Operational experience with Microsoft Forefront Identity Manager (FIM) is a plus. Minimum of 4 ... C++, C#, or Python programming and scripting knowledge in Linux and Windows environments is desired.

$52.75 - $69/hr

... Engineer to support the design, administration, management, execution & maintenance of GSA ... Forefront Identity Manager/Microsoft Identity Manager * Okta * Fastpass * WebauthN * MFA ...

$52.75 - $69/hr

... Engineer to support the design, administration, management, execution & maintenance of GSA ... Forefront Identity Manager/Microsoft Identity Manager * Okta * Fastpass * WebauthN * MFA ...

Senior Systems Engineer

Chicago, IL

$107.60K - $147.30K/yr

... Forefront Identity Manager knowledge Microsoft System Center Configuration Manager | Operations Manager Strong organizational skills Ability to work in a team environment Lync | Skype for Business ...

next page

Showing results 1-20

Microsoft Forefront Identity Manager Engineer information

See salary details

$59.5K

$111.6K

$203K

How much do microsoft forefront identity manager engineer jobs pay per year?

As of May 29, 2026, the average yearly pay for microsoft forefront identity manager engineer in the United States is $111,632.00, according to ZipRecruiter salary data. Most workers in this role earn between $80,500.00 and $132,500.00 per year, depending on experience, location, and employer.

What is the difference between Microsoft Forefront Identity Manager Engineer vs Active Directory Engineer?

AspectMicrosoft Forefront Identity Manager EngineerActive Directory Engineer
CertificationsMicrosoft certifications related to identity management, FIM, and securityMicrosoft certifications in Windows Server, Active Directory, and security
Work EnvironmentFocus on identity management, synchronization, and access management systemsManage and maintain Active Directory infrastructure and domain services
Industry UsageUsed in organizations implementing identity lifecycle management solutionsCommon in organizations with on-premises Windows server environments

The Microsoft Forefront Identity Manager Engineer specializes in identity lifecycle management and synchronization using FIM, while the Active Directory Engineer focuses on maintaining and securing Active Directory infrastructure. Both roles require Microsoft certifications and are vital in enterprise identity and access management, but they differ in scope and specific tools used.

Infographic showing various Microsoft Forefront Identity Manager Engineer job openings in the United States as of May 2026, with employment types broken down into 84% Full Time, 15% Part Time, and 1% Contract. Highlights an 97% Physical, 1% Hybrid, and 2% Remote job distribution, with an average salary of $111,632 per year, or $53.7 per hour.
Windows Systems Administrator (Microsoft Forefront Identity Manager (FIM)

Windows Systems Administrator (Microsoft Forefront Identity Manager (FIM)

krg technology inc

Washington, DC • On-site

Other

Posted 28 days ago


Job description

Company Description

Thomas  

KRG Technologies Inc.

25000 | Avenue Stanford | Suite 120 | Valencia, CA 91355

Phone: (661) 367 8000 Ext. 203

Job Description

Job Title : Windows Systems Administrator

Hiring Mode : Contract

Location : Washington DC

Essential Job Functions:


Responsible for supporting the AD FS and FIM services for Office 365 cloud messaging and SharePoint applications environments. System administration tasks include: Maintaining the infrastructure with system patches and upgrades; troubleshooting and resolving infrastructure issues working together with messaging, AD, DB, and Web teams, and application owners; engaging with the technical support service, the Premier Support for Windows Azure, if necessary.
Responsible for supporting the SailPoint IIQ service for WBG. System administration tasks include: Maintaining the infrastructure with system patches and upgrade; troubleshooting and resolving SailPoint IIQ infrastructure related issues working with application developers (workflow), application teams (DB, Web, and Server Admins), and Network and OIS teams; and engaging with the SailPoint technical support, if necessary.
Develop necessary scripts to produce specific SailPoint IIQ reports requested by IAG service users.
Work with different project teams to understand their specific authentication and authorization needs and support them integrating their applications with the available identity and access solutions.
Evaluate and provide feedback on future authentication and authorization technologies. Assess and provide recommendations on their business relevance and deployment.
Maintain the optimal performance of IAM infrastructure resources by monitoring and assessing hardware/software performance. Ensure that performance meets present and future business needs. Recommend changes/enhancements to improve system availability, reliability, and performance.
Provide third-level engineering support for resolving client issues within an ITIL Methodology including adherence to ISO20000 and ISO27001.
Participate in data center load shift and disaster Recovery exercises.
Review all system documentation to be delivered according to specified guidelines (e.g., Standard Operating Procedures). Maintains technical documentation.
Conduct regular or emergency maintenance or software upgrades following the formal change management process.
Perform troubleshooting for security incidents that require software and network forensic analysis, in close collaboration with OIS and other ITS Shared Services teams.
Define metrics to be used for management status and statistical reports.
Provide on-going knowledge transfer to team members and clients on security products and standards.


Educational Qualifications and Experience:
Education: Master's or Bachelor's degree(s) in Computer Science and/or Electrical Engineering
Role Specific Experience: Minimum two consecutive years of computer/electrical/software engineering experience in information security and identity management fields (five years of relevant experience required for applicants with only a Bachelor's degree) PLUS Minimum of two years of experience in configuring, deploying, and maintaining an Identity and Access Governance (IAG) and Account Provisioning infrastructure in an enterprise setting

Certification Requirements:
Certified Information Systems Security Professional (CISSP) by (ISC)2 and GIAC Certified Forensic Examiner (GCFE), or advanced information security training by educational organizations such as SANS Institute.

Required Skills/Abilities: (Min 5-7 years exp)
Operational experience with Microsoft Forefront Identity Manager (FIM) is a must
Proven experience in configuring, deploying, and maintaining Microsoft Active Directory Federation Services (AD FS) for cloud applications. Experience in Identity Federation solutions such as CA SiteMinder Federation is a plus.
Proven experience in supporting Windows Active Directory, including AD group policy deployment, and GPO for securing corporate computers.
Advanced knowledge of Web Access Management (WAM) and Enterprise Directory concepts (such as LDAP, Virtual Directory, Meta Directory, and LDIF) is required. Experience with Oracle Directory Server Enterprise Edition and Radiant Logic VDS in a business environment is a plus.
Strong knowledge in the areas of Microsoft Exchange, Office 365, Lync, SQL, and Certification Authority.
Good understanding of Context-based Authentication and Risk-based Authentication solutions, particularly their effective use on mobile and unmanaged devices accessing corporate and cloud applications.
Good understanding of system software design and development methodologies and implementation experience. C++, C#, Java, or Python programming and scripting knowledge in Linux and Windows environments is desired.
Experience troubleshooting system hardware and software, particularly to investigate problems related to device drivers.
Good knowledge of TCP/IP networking and protocols (DNS, ICMP, SMB, SSL/TLS, etc.)
Familiarity with performance analysis using performance monitoring and tuning tools.
Strong analytical thinking skills.
Excellent interpersonal skills, including an ability to work effectively in a team/task force as a participant or team leader.
Demonstrate flexibility to work environment changes and emerging opportunities.
Ability to balance risks and reprioritize as needed.
Demonstrate continuing professional development.
Superior verbal and written communication/presentation skills in English.
Desired Skills/Abilities (not required but a plus)
Experience with SailPoint IIQ is a plus

Additional Information

All your information will be kept confidential according to EEO guidelines.


KRG Technologies logo

About KRG Technologies

Sourced by ZipRecruiter

KRG Technologies was founded with a simple motive of offering the clients exactly what they want, how they want and when they want. By leveraging for its clients its technological edge and right-sourcing advantage, KRG in a short period of time has grown to become one of the most trusted strategic technology partners. Treating every client as the top priority, we customize our solutions and services to align with the unique needs of each client. Headquartered in Valencia, California, KRG employs a unique global delivery platform to minister its offerings spanning from application development and maintenance to business process reengineering. With years of hands-on domain experience and international presence, we offer state-of-the-art solutions backed by our follow-the-sun service model in the most cost effective manner. We value our clientele for the trust reposed in us and our clientele admire us for our personalized approach and deep commitment to their success. Our biggest strength lies in technical expertise of our team and individual competency of our employees, which enables us to be the most befitting solution provider.

Industry

It services

Company size

201 - 500 Employees

Headquarters location

Valencia, CA, US

Year founded

2003

Social media