Title: IAM Engineer
Location: Brooklyn, NY
Duration: Long Term
Normal business hours Monday-Friday 35 hours/week (not including mandatory unpaid meal break after 6 hours of work).
MANDATORY SKILLS/EXPERIENCE Note: Candidates who do not have the mandatory skills will not be considered.
• 12 years in IAM architect, engineering, administration and operations with focus on directory services and PKI
• Deep expertise in Active Directory (on-prem and hybrid), Entra ID, and eDirectory
• Hands-on experience in designing and operating Microsoft PKI, including certificate authority management, certificate lifecycle, and automation
• Solid understanding of modern authentication/authorization protocols (OAuth, SAML, Kerberos, etc.)
• Experience with security roadmap development, risk assessment, and compliance (NIST, ISO, SOX or PCI-DSS)
• Strong documentation, communication, and stakeholder management skills.
DESIRABLE SKILLS/EXPERIENCE:
• Experience with cloud PKI services
• Familiarity with Entra ID Governance, Conditional Access Policy, and modern security controls
• Experience automating PKI workflows (API/script-based certificate management)
• Multi-forest, multi-tenant IAM architecture expertise
• Prior experience working with NYC agency
• Working knowledge of enterprise ITSM, change management, and project management methodologies
Never miss an opportunity! Create an alert based on the job you applied for.
