Identity and Access Management​/Brooklyn, NY; Hybrid

Job Title

The Identity and Access Management (IAM) team seeks a highly motivated Engineer.

Work Location:

Hybrid – 3 days onsite, 2 days remote

Scheduled

Work Hours:

8:30-5:30pm: 1 hour mealtime

• Provide strategy, direction and leadership in incorporating all parts of IGA (access request, provisioning, de-provisioning, access review, and solving complex IAM related issues Manage escalations from staff, assist in setting priorities and risk mitigation strategies across the environment

• Design, implement, manage and engineering support for PAM/IAM backend infrastructure and IGA Platform based on best practices

• Lead development and implement procedures, runbooks, and documents to support the PAM/IAM services

• Support and onboard servers and users to PAM and IGA services

• Have solid knowledge of SailPoint, Cisco Client, Delinea

• Support in troubleshooting and resolving complex identity, authentication, authorization, entitlement, permissions and integration problems

• Administer Windows 2012/2016/2019 server
- Forest, Domain trust, AD, Client, DNS, WINS, DHCP, Group Policy, Distribution lists, Windows folder security, and IP filter

• Administer a hybrid multi-tenant Microsoft Azure and Office 365, Amazon Web Services Cloud Platform environments;

• Advanced knowledge of modern authentications technologies and concepts such as SAML, Federation, SSO, OPenID, OAuth, Privilege Access Management (PAM), and Multi-Factor Authentication (MFA)

• Working knowledge of SailPoint, Cisco Client, Delinea Secret Server.

• CISSP, or other IAM tool specific security certifications

• Candidate must have Linked In account

A baccalaureate degree from an accredited college and 7 years of satisfactory full-time experience in IAM technologies working Hybrid Multi-cloud, Multi-tenant environment including Active Directory, Azure Active Directory, GCP and AWS.

5 Years' experience managing and administering Identity and Access Management (IAM) tools and processes, Role Based Access Controls (RBAC), Privileged Access Management (PAM) and IGA platforms

Understanding of cloud architecture Azure AD/Entra , AWS, Salesforce

Provide oversight and assess security controls for IaaS, PaaS, and SaaS services, while collaborating with system integrators and NYCERS teams to deliver reliable and scalable security capabilities.

Oversee and lead the implementation of security solutions, develop technical, and reference architectures throughout the project duration.

Responsible for assessing and reviewing end-to-end secure integrations including web services and APIs.

Work closely with NYCERS security team and third party system integrators on security engineering related issues and resolving the issues without affecting the overall project delivery timelines.

Perform other duties as assigned as part of information security projects and initiatives.