Identity and Access Management (IAM) Engineer

Universal Technologies; United States; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive Compensation

Health, Dental, Vision Benefits

401k Retirement Plan

HSA/FSAs

Paid Time Off

Job summary

UNIVERSAL Technologies LLC is seeking an experienced Identity and Access Management (IAM) Engineer for a hybrid role based in Brooklyn, NY. The ideal candidate will design, implement and maintain enterprise IAM solutions across cloud and on-premises environments, with deep expertise in AD, Entra ID, PKI, and governance.

You will automate identity lifecycle, support complex authentication, authorization, and access controls, and collaborate with security, infrastructure and business teams to

Qualifications

• 12+ years hands-on experience designing implementing and maintaining enterprise IAM solutions.
• Deep expertise with AD PKI Entra ID LDAP SAML and OAuth.
• Proven track record delivering complex IAM projects with infrastructure dependencies.
• RBAC design translating business requirements into secure IAM solutions.
• Experience with cloud integrations in hybrid environments.
• Automation experience using PowerShell Python or REST APIs.

Responsibilities

• Support and maintain enterprise IAM for cloud and on-prem environments.
• Engineer and administer Active Directory and Entra ID.
• Implement identity governance including access reviews and provisioning.
• Design secure integrations between IAM platforms and SaaS/PaaS apps.
• Develop automation to improve identity operations and lifecycle management.
• Provide Tier 2/3 IAM support and root-cause analysis.

Skills

Hands-on IAM design

Active Directory

Microsoft Entra ID

PKI

RBAC

Cloud integration

PowerShell

Python

REST APIs

Troubleshooting

Tools

Active Directory

Microsoft Entra ID

LDAP

SAML

OAuth

PowerShell

Python

REST APIs

Job description

WHO WE ARE

UNIVERSAL Technologies LLC is seeking an experienced Identity and Access Management IAM Engineer with at least 12 years of hands on experience designing implementing and maintaining enterprise identity and access management solutions for a hybrid position in Brooklyn NY The IAM Engineer will support highly available cloud and on premises environments engineer and administer enterprise identity platforms provide advanced technical support and automate identity lifecycle and governance processes Active LinkedIn profile preferred The ideal candidate will possess deep expertise in Active Directory Microsoft Entra ID PKI identity governance access controls cloud integrations scripting and complex troubleshooting across enterprise environments

WHAT WE OFFER

• Competitive Compensation
• Health Dental and Vision Benefits
• Group Life Insurance
• 401k Retirement Plan
• Health Savings Account HSA and Flexible Spending Account
• FSAPre Tax Transportation Benefits
• Generous Paid Time Off and Holiday Package
• Professional Development Opportunities

MANDATORY SKILLS

• Experience Minimum twelve 12 years of hands on experience designing implementing and maintaining robust enterprise Identity and Access Management solutions
• Demonstrated expertise with Active Directory Public Key Infrastructure PKI Microsoft Entra ID LDAP SAML and OAuth
• Proven track record successfully delivering projects involving complex technical subjects infrastructure dependencies and mission critical systems
• Deep understanding of Role Based Access Control RBAC methodologies including the ability to translate business requirements into secure technical solutions
• Extensive experience operating enterprise identity governance solutions including access reviews certification workflows role mining and automated provisioning
• Strong background integrating IAM platforms with cloud service providers and hybrid environments including secure patterns for SaaS PaaS and on premises applications
• Deep understanding of identity lifecycle management including joiner mover and leaver processes attribute governance and advanced workflow automation
• Advanced scripting and automation experience using PowerShell Python and REST APIs for large scale identity orchestration and operational efficiency
• Strong analytical troubleshooting and issue resolution skills with the ability to investigate complex identity authentication authorization and access problems
• Ability to work independently manage multiple priorities and drive assignments to completion with minimal supervision
• Excellent verbal and written communication skills with the ability to collaborate effectively across technical teams business stakeholders and leadership
• Ability to participate in after hours and on call support for high availability systems when required
• Experience with Microsoft Azure Active Directory Microsoft Entra ID PowerShell scripting and enterprise browser access controls is preferred

SCOPE OF SERVICES

• Support enterprise cloud and on premises identity infrastructure for highly critical systems requiring continuous availability
• Engineer administer maintain and troubleshoot Active Directory environments including directory services group policy authentication and access controls
• Engineer and administer Microsoft Entra ID including identity synchronization conditional access authentication authorization and hybrid identity capabilities
• Engineer and administer enterprise browser security and access management tooling
• Provide Tier 2 and Tier 3 IAM technical support including advanced incident investigation root cause analysis remediation and escalation management
• Operate and enhance identity governance capabilities including access reviews certification workflows role management provisioning and deprovisioning
• Design and implement secure integrations between IAM platforms and SaaS PaaS cloud and on premises applications
• Develop and maintain automation using PowerShell Python APIs and other scripting technologies to improve identity operations and lifecycle management
• Support PKI LDAP SAML OAuth federation single sign on and related identity and authentication technologies
• Translate business and security requirements into scalable IAM architecture engineering standards operational procedures and technical solutions
• Monitor IAM services identify operational risks resolve service disruptions and support platform resilience and availability objectives
• Maintain accurate technical documentation configuration records support procedures incident findings and operational status updates
• Collaborate with infrastructure security application cloud and business teams to coordinate IAM changes releases integrations and production support
• Participate in scheduled after hours and on call support as required to address critical issues outside normal business hours
• Perform additional Identity and Access Management responsibilities as required to support project objectives

UNIVERSAL Technologies LLC is an Equal Opportunity Employer