Senior IAM Engineer

The Corporate; New York (NY); Hybrid; USD 140,000 - 180,000; Full time

Job summary

NY City Gov OTI is seeking a Senior IAM Engineer in Brooklyn, NY, onsite 3 days a week with 2 days remote, to design and implement enterprise IAM solutions for government applications. You will work across security, IT ops, and cloud teams on RBAC, identity governance, and access reviews.

The role requires 12+ years of hands-on IAM experience, strong scripting (PowerShell, Python) and API automation, and proven ability to translate business needs into scalable identity infrastructure.

Qualifications

• 12+ years hands-on IAM design, implementation and maintenance.
• Expertise with Active Directory, PKI, EntraID, LDAP, SAML and OAuth.
• Proven track record delivering complex IAM projects.
• Deep RBAC understanding with strong analytical and communication skills.
• Experience operating enterprise Identity Governance (access reviews, cert workflows, role mining, provisioning).
• Strong cloud/hybrid IAM patterns for SaaS, PaaS, on-prem apps.
• Identity lifecycle management incl. joiner/mover/leaver & attribute governance.
• Advanced scripting: PowerShell, Python, REST APIs for large-scale identity orchestration.

Skills

Active Directory

PKI

EntraID

LDAP

SAML

OAuth

RBAC

Identity Governance

Automation scripting

PowerShell

Python

REST APIs

Tools

REST APIs

Job description

Job Title: Senior IAM Engineer

Client Name: NY City Gov OTI

Location: 2, Metrotech , Brooklyn, NY- 3 days onsite -- 2 days remote

Duration: 1 year

Interview Mode: Phone then Video

MANDATORY SKILLS/EXPERIENCE

Note: Candidates who do not have mandatory skills will not be considered.

• A minimum of 12 years of hands-on experience in designing, implementing, and maintaining robust IAM solutions.


• Demonstrated expertise in working with industry-leading technologies such as Active Directory, PKI, EntraID, LDAP, SAML, and OAuth.


• Proven track record of successfully delivering projects that involve complex technical subjects and tasks.


• A deep understanding of RBAC methodologies, coupled with strong analytical and troubleshooting skills, the ability to translate business requirements into technical solutions, and excellent communication and collaboration abilities to work effectively across diverse teams and stakeholders.


• Extensive experience operating enterprise Identity Governance solutions, including access reviews, certification workflows, role mining, and provisioning automation.


• Strong background integrating IAM platforms with cloud service providers and hybrid environments, including designing secure patterns for SaaS, PaaS, and on-prem applications.


• Deep understanding of identity lifecycle management, including joiner/mover/leaver processes, attribute governance, and advanced automation using APIs and scripting.


• Advanced scripting and automation skills (PowerShell, Python, REST APIs) for large-scale identity orchestration and operational efficiency.

DESIRABLE SKILLS/EXPERIENCE:

• Experience with browser control and endpoint security technologies (e.g., Chrome Enterprise, Edge policies, or similar)


• Familiarity with DevOps practices and CI/CD pipelines for IAM automation (e.g., Terraform, Azure DevOps, GitHub Actions)


• Knowledge of zero-trust architecture principles and implementation in IAM contexts


• Experience supporting compliance with regulatory frameworks (e.g., NIST, ISO 27001, NYC local laws)