IAM Architect Brooklyn NY - Onsite

IAM Architect Brooklyn NY - Onsite
Duration: Long Term

Job Responsibilities:
2 years in IAM architect, engineering, administration and operations with focus on directory services and PKI
Deep expertise in Active Directory (on-prem and hybrid), Entra ID, and eDirectory
Hands-on experience in designing and operating Microsoft PKI, including certificate authority management, certificate lifecycle, and automation
Solid understanding of modern authentication/authorization protocols (OAuth, SAML, Kerberos, etc.)
Experience with security roadmap development, risk assessment, and compliance (NIST, ISO, SOX or PCI-DSS)
Strong documentation, communication, and stakeholder management skills.


DESIRABLE SKILLS/EXPERIENCE:

Experience with cloud PKI services
Familiarity with Entra ID Governance, Conditional Access Policy, and modern security controls
Experience automating PKI workflows (API/script-based certificate management)
Multi-forest, multi-tenant IAM architecture expertise
Prior experience working with NYC agency
Working knowledge of enterprise ITSM, change management, and project management methodologies