Public Sector IAM Engineer - PKI & Entra ID Specialist

TECHNOLOGY & INNOVATION; New York (NY); On-site; USD 95,000 - 145,000; Full time

Job summary

The Office of Technology and Innovation (OTI) in Brooklyn seeks an IAM Engineer to design, administer, and improve identity and access management. You will handle certificate lifecycle with PKI, manage Entra ID and Active Directory, and support authentication services and access provisioning.

You will contribute to infrastructure modernization, support governance initiatives, and work with cross-functional teams to keep IAM services reliable and secure.

Qualifications

• A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the particular position
• Education and/or experience which is equivalent to the above

Responsibilities

• Administer AD CS and/or third-party CAs; process certificate issuance, renewal and revocation (CRL/OCSP)
• Support HSM operations and key ceremonies under senior staff guidance
• Maintain and assist CLM tooling for certificate tracking, automation and reporting
• Troubleshoot certificate-related production issues and elevate complex trust chain or design problems to senior engineers
• Follow established PKI standards and compliance guidelines (NIST, CIS) and support documentation updates
• Perform both operational and engineering tasks, including resolving identity-related issues, implementing access and authentication changes, supporting system integrations
• Provides support for governance and security initiatives and contributes to special projects and strategic efforts as assigned
• Provide support for governance and security initiatives and contribute to assigned special projects and strategic efforts.
• Coordinate with infrastructure, security, and application teams to ensure IAM services remain reliable, secure, and aligned with agency objectives

Skills

PKI administration

Microsoft Entra ID

Active Directory

Access management

MFA & CA

PowerShell scripting

Ansible Python

Identity governance

Communication skills

Education

Bachelor's degree

Job description

The Office of Technology and Innovation (OTI) in Brooklyn seeks an IAM Engineer to design, administer, and improve identity and access management. You will handle certificate lifecycle with PKI, manage Entra ID and Active Directory, and support authentication services and access provisioning.

You will contribute to infrastructure modernization, support governance initiatives, and work with cross-functional teams to keep IAM services reliable and secure.