IAM/Privileged Access Management Architect

InterSources Inc; New York (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

InterSources Inc in New York is seeking an IAM /Privileged Access Management Architect for a 12-month hybrid contract. The role includes managing identity provisioning workflows, supporting governance of Azure and Active Directory security groups, and leading onboarding/offboarding processes.

The ideal candidate has over 7 years of experience in IAM /PAM and is familiar with tools like SailPoint IIQ and Azure Entra ID. Strong knowledge of access lifecycle and least-privilege models is essential.

Qualifications

• 7+ years of experience in IAM /PAM in enterprise environments.
• Familiarity with SailPoint IIQ, Azure Entra ID, and Active Directory.
• Strong knowledge of access lifecycle and least-privilege models.

Responsibilities

• Manage identity provisioning/deprovisioning workflows and access requests.
• Support governance of AD / Azure / Entra ID security groups.
• Monitor and refine onboarding/offboarding processes via IAM platforms.

Skills

IAM /PAM management

SailPoint IIQ

Azure Entra ID

Active Directory

ServiceNow

Basic scripting knowledge (PowerShell)

Cloud platforms (Azure, AWS, GCP)

MFA and SSO

RBAC design

Job description

Title: IAM /Privileged Access Management Architect

Location: NYC, New York 10004

Work Mode- Hybrid - 3 Days Onsite and 2 Days Remote

Duration: 12 month+ Contract

Client needs an IAM /PAM Architect

Responsibilities

• Access Administration Oversight: Manage identity provisioning/deprovisioning workflows, access requests, and escalations for employees, contractors, and vendors.
• Directory and Group Management: Support governance and lifecycle of AD / Azure / Entra ID security groups and distribution lists, including group ownership, naming conventions, and expiration policies.
• Joiner-Mover-Leaver (JML) Workflow Execution: Monitor and refine onboarding/offboarding processes via SailPoint or similar IAM platforms.
• Policy & Controls Alignment: Assist in implementing least-privilege access, SoD checks, and audit remediation efforts for regulated applications.
• Team Leadership & Guidance: Act as a lead or escalation point for junior team members. Help manage queue priorities, ensure SLA compliance, and drive operational consistency.
• IAM Documentation & SOPs: Maintain up-to-date documentation of access policies, procedures, and exception handling workflows.
• Application Access Support: Liaise with app owners and business units to define and implement role-based access models.

Qualifications

• Strong 7+ years of experience in IAM /PAM , preferably in enterprise or public sector environments
• Familiarity with tools like SailPoint IIQ, Azure Entra ID, Active Directory, ServiceNow, and MFA (Duo, Microsoft, etc.)
• Strong understanding of access lifecycle, group management, and least-privilege models
• Basic scripting or workflow logic knowledge (e.g., PowerShell or automation platforms) is a plus
• Hands‑on experience with AD, Entra ID, Linux, and at least one major cloud platform (Azure, AWS, or GCP).
• Strong knowledge of vaulting technologies and endpoint privilege management practices (least privilege, privilege elevation, application control).
• Proficiency with authentication methods: MFA, SSO, passwordless, Kerberos, and certificate-based access.
• Familiarity with NIST 800-63B, Zero Trust frameworks, ITDR, and cloud security standards (CIS, CSA, etc.).
• Demonstrated reliability and ownership in operational support environments
• Experience with privileged access, RBAC design, or CIAM platforms
• Audit or compliance exposure (e.g., NIST, SOX, NYS Cyber Regs)
• Prior experience mentoring or managing small teams