IAM Engineer

IAM Engineer

Client: NYC Agency

Location: Remote

Duration: 24 Months

Job Description:

• The Identity and Access Management (IAM) team seeks a highly motivated Engineer with the following specifications to lead the ongoing modernization of our critical IAM/PAM infrastructure.

• The IAM team is responsible for the design and implementation of various IAM technologies including Microsoft Active Directory Federation Services Azure Active Directory Identity Governance and Administration (IGA) and Privileged Access Management.

• This individual will serve as subject matter expert for IAM team to provide handson technical guidance and helping with implementation of various IAM and IGA tools and processes.

Mandatory Skills:

• Provide strategy direction and leadership in incorporating all parts of IGA (access request provisioning deprovisioning access review and solving complex IAM related issues

• Manage escalations from staff assist in setting priorities and risk mitigation strategies across the environment

• Design implement manage and engineering support for PAM/IAM backend infrastructure and IGA Platform based on best practices

• Lead development and implement procedures runbooks and documents to support the PAM/IAM services

• Support and onboard servers and users to PAM and IGA services

• Have solid knowledge of SailPoint Cisco ISE PAM and MFA solutions

• Python Scripting

• Support in troubleshooting and resolving complex identity authentication authorization entitlement permissions and integration problems

• Administer Windows 2012/2016/2019 server Forest Domain trust AD DFS DNS WINS DHCP Group Policy Distribution lists Windows folder security and IP filter

• Administer a hybrid multitenant Microsoft Azure and Office 365 Amazon Web Services Cloud Platform environments; Microsoft Entra ID and on premise Active Directory.

• Advanced knowledge of modern authentications technologies and concepts such as SAML Federation SSO OPenID OAuth Privilege Access Management (PAM) and MultiFactor Authentication (MFA).

• Working knowledge of SailPoint and Cisco ISE (Secure Workload and TrustSec)

• CISSP or other IAM tool specific security certifications

• Candidate must have LinkedIn account

Desirable Skills:

• A baccalaureate degree from an accredited college and 7 years of satisfactory fulltime experience in IAM technologies working Hybrid Multicloud Multitenant environment including Active Directory Azure Active Directory GCP and AWS.

• 5 Years experience managing and administering Identity and Access Management (IAM) tools and processes Role Based Access Controls (RBAC) Privileged Access Management (PAM) and IGA platforms

• Understanding of cloud architecture Azure AD/Entra ID AWS Salesforce

• Provide oversight and assess security controls for IaaS PaaS and SaaS services while collaborating with system integrators and Client teams to deliver reliable and scalable security capabilities.

• Oversee and lead the implementation of security solutions develop technical and reference architectures throughout the project duration.

• Responsible for assessing and reviewing endtoend secure integrations including web services and APIs.

• Work closely with Client security team and third party system integrators on security engineering related issues and resolving the issues without affecting the overall project delivery timelines.

• Perform other duties as assigned as part of information security projects and initiatives.

John Francis

Senior IT Recruiter

M:

Email: