IAM Consultant

Job Title: IAM Consultant
Location: Brooklyn, NY

Job Description:

• Assess and develop a roadmap for OTI's disparate directories consolidation
• Provide guidance and implementation support for integration with Entra and other IAM security enhancements
• Architect and implement Citywide-level PKI modernization, including infrastructure changes for reduced certificate lifespans
• Advice on governance, compliance, lifecycle management and automation of digital certificates
• Lead migration planning, risk assessment, and mitigation for directories and PKI modernization
• Perform technical knowledge transfer, upskilling internal teams on new infrastructure and practices

Tasks:

• PKI Architecture, Engineering and Administrator 40%
• Entra ID Architecture, Engineering and Administrator 30%
• Directory Architecture, Engineering and Administrator 20%
• IAM Level 3 Technical Support 10%

Note: Candidates who do not have the mandatory skills will not be considered.

Mandatory Skills/experience:

• 12 years in IAM architect, engineering, administration and operations with focus on directory services and PKI
• Deep expertise in Active Directory (on-prem and hybrid), Entra ID, and eDirectory
• Hands-on experience in designing and operating Microsoft PKI, including certificate authority management, certificate lifecycle, and automation
• Solid understanding of modern authentication/authorization protocols (OAuth, SAML, Kerberos, etc.)
• Experience with security roadmap development, risk assessment, and compliance (NIST, ISO, SOX or PCI-DSS)
• Strong documentation, communication, and stakeholder management skills