A leading staffing agency is seeking a Mid-Senior IAM Architect to join a contract role in New York City. The position involves expertise in IAM architecture, especially in directory services and PKI. Successful candidates will have significant experience with Active Directory and modern authentication protocols. This role allows for three days onsite and two days remote work.
Qualifications
12 years in IAM architect, engineering, administration with focus on directory services and PKI.
Deep expertise in Active Directory (on-prem and hybrid), Entra ID, and eDirectory.
Hands-on experience in designing and operating Microsoft PKI.
Responsibilities
Architect and implement Citywide-level PKI modernization.
Develop a roadmap for disparate directories consolidation.
Perform technical knowledge transfer to internal teams.
Skills
IAM architecture
Engineering and administration
Active Directory expertise
Microsoft PKI management
Modern authentication protocols
Documentation skills
Stakeholder management
Job description
Brooklyn NY - 3 days onsite and 2 days remote
Mandatory Skills
12 years in IAM architect, engineering, administration and operations with focus on directory services and PKI
Deep expertise in Active Directory (on-prem and hybrid), Entra ID, and eDirectory
Hands‑on experience in designing and operating Microsoft PKI, including certificate authority management, certificate lifecycle, and automation
Solid understanding of modern authentication/authorization protocols (OAuth, SAML, etc.)
Experience with security roadmap development, risk assessment, and compliance (NIST, ISO, SOX or PCI‑DSS)
Strong documentation, communication, and stakeholder management skills
TASKS
PKI Architecture, Engineering and Administrator – 40%
Entra ID Architecture, Engineering and Administrator – 30%
Directory Architecture, Engineering and Administrator – 20%
IAM Level 3 Technical Support – 10%
SCOPE OF SERVICES
Assess and develop a roadmap for OTI’s disparate directories consolidation
Provide guidance and implementation support for integration with Entra and other IAM security enhancements
Architect and implement Citywide-level PKI modernization, including infrastructure changes for reduced certificate lifespans
Advice on governance, compliance, lifecycle management and automation of digital certificates
Lead migration planning, risk assessment, and mitigation for directories and PKI modernization
Perform technical knowledge transfer, upskilling internal teams on new infrastructure and practices
Seniority level
Mid‑Senior level
Employment type
Contract
Job function
Other
Industries
Software Development and Security and Investigations