Identity and Access Management Engineer

Princeton IT Services, Inc; New York (NY); Hybrid; USD 96,000 - 179,000; Part time

Job summary

Princeton IT Services, Inc. is seeking an Identity and Access Management (IAM) Engineer to design, implement, and support enterprise IAM across hybrid environments in Brooklyn, NY.

The role emphasizes AD, Entra ID/Azure AD, PKI, LDAP, SAML, OAuth, and governance technologies. Responsibilities include design and administration of AD and Azure AD, IAM integration with cloud and on-prem systems, RBAC modeling, and automation via PowerShell, Python, and REST APIs.

Qualifications

• 12+ years hands-on experience designing, implementing, and supporting enterprise IAM.
• Strong expertise in Active Directory, Microsoft Entra ID (Azure AD), PKI, LDAP, SAML, OAuth.
• Experience with Identity Governance solutions: Access Reviews, Certification Workflows, Role Mining, Provisioning Automation.

Responsibilities

• Design, implement, and administer Active Directory infrastructure.
• Engineer and manage Microsoft Entra ID (Azure AD) environments.
• Support and administer IAM services including identity governance.
• Provide Tier 2 technical support for IAM incidents and requests.
• Implement and maintain Identity Governance and Administration solutions.
• Manage joiner, mover, leaver workflows and RBAC models.
• Integrate IAM with cloud, SaaS, and on-prem systems.
• Develop automation using PowerShell, Python, and REST APIs.
• Collaborate with infra, security, and app teams for secure identity management.

Skills

Active Directory

Microsoft Entra ID (Azure AD)

PKI

LDAP

SAML

OAuth

Identity Governance

RBAC

PowerShell

Python

REST APIs

Tools

PowerShell

Python

REST APIs

Job description

Job Title: Identity and Access Management (IAM) Engineer

Location: Brooklyn, NY (Hybrid)

Employment Type: Contract / Long-Term Engagement

Job Summary

We are seeking an experienced Identity and Access Management (IAM) Engineer to design, implement, and support enterprise IAM solutions across hybrid environments. The ideal candidate will have deep expertise in Active Directory, Microsoft Entra ID (Azure AD), PKI, LDAP, SAML, OAuth, and identity governance technologies. This role involves engineering, administration, automation, and support of mission-critical identity services.

Key Responsibilities

• Design, implement, and administer Active Directory infrastructure.
• Engineer and manage Microsoft Entra ID (Azure AD) environments.
• Support and administer MEBSE and enterprise identity services.
• Provide Tier 2 technical support for IAM-related incidents and requests.
• Implement and maintain Identity Governance and Administration (IGA) solutions.
• Manage identity lifecycle processes, including joiner, mover, and leaver workflows.
• Design and implement Role-Based Access Control (RBAC) models.
• Integrate IAM solutions with cloud platforms, SaaS applications, and on-premises systems.
• Develop automation using PowerShell, Python, and REST APIs.
• Collaborate with infrastructure, security, and application teams to ensure secure identity management.

Required Qualifications

• Minimum 12 years of hands-on experience designing, implementing, and supporting enterprise IAM solutions.
• Strong expertise in:
  • Active Directory
  • Microsoft Entra ID (Azure AD)
  • PKI
  • LDAP
  • SAML
  • OAuth
• Extensive experience with Identity Governance solutions, including:
  • Access Reviews
  • Certification Workflows
  • Role Mining
  • Provisioning Automation
• Strong understanding of RBAC methodologies.
• Experience integrating IAM platforms with cloud and hybrid environments.
• Deep knowledge of identity lifecycle management and attribute governance.
• Advanced scripting experience with PowerShell, Python, and REST APIs.
• Excellent analytical, troubleshooting, communication, and collaboration skills.

Preferred Qualifications

• Advanced PowerShell scripting experience.
• Expertise in Microsoft Entra ID, Azure AD, and Active Directory administration.
• Experience with browser security controls.
• Experience supporting highly available, enterprise-scale infrastructure environments