IAM Architect

Brooklyn NY - 3 days onsite and 2 days remote

Mandatory Skills

12 years in IAM architect, engineering, administration and operations with focus on directory services and PKI

Deep expertise in Active Directory (on-prem and hybrid), Entra ID, and eDirectory

Hands‑on experience in designing and operating Microsoft PKI, including certificate authority management, certificate lifecycle, and automation

Solid understanding of modern authentication/authorization protocols (OAuth, SAML, etc.)

Experience with security roadmap development, risk assessment, and compliance (NIST, ISO, SOX or PCI‑DSS)

Strong documentation, communication, and stakeholder management skills

TASKS

PKI Architecture, Engineering and Administrator – 40%

Entra ID Architecture, Engineering and Administrator – 30%

Directory Architecture, Engineering and Administrator – 20%

IAM Level 3 Technical Support – 10%

SCOPE OF SERVICES

Assess and develop a roadmap for OTI’s disparate directories consolidation

Provide guidance and implementation support for integration with Entra and other IAM security enhancements

Architect and implement Citywide-level PKI modernization, including infrastructure changes for reduced certificate lifespans

Advice on governance, compliance, lifecycle management and automation of digital certificates

Lead migration planning, risk assessment, and mitigation for directories and PKI modernization

Perform technical knowledge transfer, upskilling internal teams on new infrastructure and practices

Seniority level Mid‑Senior level

Employment type Contract

Job function Other

Industries Software Development and Security and Investigations

#J-18808-Ljbffr