IAM Architect

New Position: Specialist 3, IAM Architect

Duration : 2 year 35 hours per week

Hybrid Location: 3 days onsite and 2 days remote Metro Tech , Brooklyn NY

Years of experience: 15 years

MANDATORY SKILLS/EXPERIENCE Note: Candidates who do not have the mandatory skills will

not be considered.

• 12 years in IAM architect, engineering, administration and operations with focus on

directory services and PKI

• Deep expertise in Active Directory (on-prem and hybrid), Entra ID, and eDirectory
• Hands-on experience in designing and operating Microsoft PKI, including certificate

authority management, certificate lifecycle, and automation

• Solid understanding of modern authentication/authorization protocols (OAuth, SAML,

Kerberos, etc.)

• Experience with security roadmap development, risk assessment, and compliance

(NIST, ISO, SOX or PCI-DSS)

• Strong documentation, communication, and stakeholder management skill

SCOPE OF SERVICES:

• Assess and develop a roadmap for OTI s disparate directories consolidation
• Provide guidance and implementation support for integration with Entra and other IAM

security enhancements

• Architect and implement Citywide-level PKI modernization, including infrastructure

changes for reduced certificate lifespans

• Advice on governance, compliance, lifecycle management and automation of digital

certificates

• Lead migration planning, risk assessment, and mitigation for directories and PKI

modernization

• Perform technical knowledge transfer, upskilling internal teams on new infrastructure

and practices

TASKS:

• PKI Architecture, Engineering and Administrator 40%
• Entra ID Architecture, Engineering and Administrator 30%
• Directory Architecture, Engineering and Administrator 20%
• IAM Level 3 Technical Support 10%