Identity and Access Management (IAM) Engineer

UNIVERSAL Technologies, LLC is seeking an experienced Identity and Access Management (IAM) Engineer with at least 12 years of hands-on experience designing, implementing, and maintaining enterprise identity and access management solutions for a hybrid position in Brooklyn, NY. The IAM Engineer will support highly available cloud and on-premises environments, engineer and administer enterprise identity platforms, provide advanced technical support, and automate identity lifecycle and governance processes. Active LinkedIn profile preferred. The ideal candidate will possess deep expertise in Active Directory, Microsoft Entra ID, PKI, identity governance, access controls, cloud integrations, scripting, and complex troubleshooting across enterprise environments.

WHO WE ARE

UNIVERSAL Technologies, LLC is a Women-Owned (M/WBE) IT solutions and consulting company focused on delivering enterprise systems and professional services across Application Development, Business Analysis, Project Management, Cyber Security, Data Analytics, Infrastructure, and Systems Architecture. We partner with public and private sector organizations to provide highly skilled technology professionals who drive business transformation and operational excellence.

WHAT WE OFFER

• Competitive Compensation
• Health, Dental, and Vision Benefits
• Group Life Insurance
• 401(k) Retirement Plan
• Health Savings Account (HSA) and Flexible Spending Account (FSA)
• Pre-Tax Transportation Benefits
• Generous Paid Time Off and Holiday Package
• Professional Development Opportunities

Mandatory Skills / Experience

• Minimum twelve (12) years of hands-on experience designing, implementing, and maintaining robust enterprise Identity and Access Management solutions.
• Demonstrated expertise with Active Directory, Public Key Infrastructure (PKI), Microsoft Entra ID, LDAP, SAML, and OAuth.
• Proven track record successfully delivering projects involving complex technical subjects, infrastructure dependencies, and mission-critical systems.
• Deep understanding of Role-Based Access Control (RBAC) methodologies, including the ability to translate business requirements into secure technical solutions.
• Extensive experience operating enterprise identity governance solutions, including access reviews, certification workflows, role mining, and automated provisioning.
• Strong background integrating IAM platforms with cloud service providers and hybrid environments, including secure patterns for SaaS, PaaS, and on-premises applications.
• Deep understanding of identity lifecycle management, including joiner, mover, and leaver processes, attribute governance, and advanced workflow automation.
• Advanced scripting and automation experience using PowerShell, Python, and REST APIs for large-scale identity orchestration and operational efficiency.
• Strong analytical, troubleshooting, and issue-resolution skills with the ability to investigate complex identity, authentication, authorization, and access problems.
• Ability to work independently, manage multiple priorities, and drive assignments to completion with minimal supervision.
• Excellent verbal and written communication skills with the ability to collaborate effectively across technical teams, business stakeholders, and leadership.
• Ability to participate in after-hours and on-call support for high-availability systems when required.
• Experience with Microsoft Azure, Active Directory, Microsoft Entra ID, PowerShell scripting, and enterprise browser access controls is preferred.
• Ability to successfully complete a background check.

Scope of Services

• Support enterprise cloud and on-premises identity infrastructure for highly critical systems requiring continuous availability.
• Engineer, administer, maintain, and troubleshoot Active Directory environments, including directory services, group policy, authentication, and access controls.
• Engineer and administer Microsoft Entra ID, including identity synchronization, conditional access, authentication, authorization, and hybrid identity capabilities.
• Engineer and administer enterprise browser security and access-management tooling.
• Provide Tier 2 and Tier 3 IAM technical support, including advanced incident investigation, root-cause analysis, remediation, and escalation management.
• Operate and enhance identity governance capabilities, including access reviews, certification workflows, role management, provisioning, and deprovisioning.
• Design and implement secure integrations between IAM platforms and SaaS, PaaS, cloud, and on-premises applications.
• Develop and maintain automation using PowerShell, Python, APIs, and other scripting technologies to improve identity operations and lifecycle management.
• Support PKI, LDAP, SAML, OAuth, federation, single sign-on, and related identity and authentication technologies.
• Translate business and security requirements into scalable IAM architecture, engineering standards, operational procedures, and technical solutions.
• Monitor IAM services, identify operational risks, resolve service disruptions, and support platform resilience and availability objectives.
• Maintain accurate technical documentation, configuration records, support procedures, incident findings, and operational status updates.
• Collaborate with infrastructure, security, application, cloud, and business teams to coordinate IAM changes, releases, integrations, and production support.
• Participate in scheduled after-hours and on-call support as required to address critical issues outside normal business hours.
• Perform additional Identity and Access Management responsibilities as required to support project objectives.

UNIVERSAL Technologies, LLC is an Equal Opportunity Employer.