Brooklyn NY - 3 days onsite and 2 days remote
Mandatory Skills
- 12 years in IAM architect, engineering, administration and operations with focus on directory services and PKI
- Deep expertise in Active Directory (on-prem and hybrid), Entra ID, and eDirectory
- Hands‑on experience in designing and operating Microsoft PKI, including certificate authority management, certificate lifecycle, and automation
- Solid understanding of modern authentication/authorization protocols (OAuth, SAML, etc.)
- Experience with security roadmap development, risk assessment, and compliance (NIST, ISO, SOX or PCI‑DSS)
- Strong documentation, communication, and stakeholder management skills
TASKS
- PKI Architecture, Engineering and Administrator – 40%
- Entra ID Architecture, Engineering and Administrator – 30%
- Directory Architecture, Engineering and Administrator – 20%
- IAM Level 3 Technical Support – 10%
SCOPE OF SERVICES
- Assess and develop a roadmap for OTI’s disparate directories consolidation
- Provide guidance and implementation support for integration with Entra and other IAM security enhancements
- Architect and implement Citywide-level PKI modernization, including infrastructure changes for reduced certificate lifespans
- Advice on governance, compliance, lifecycle management and automation of digital certificates
- Lead migration planning, risk assessment, and mitigation for directories and PKI modernization
- Perform technical knowledge transfer, upskilling internal teams on new infrastructure and practices
Seniority level
Mid‑Senior level
Employment type
Contract
Job function
Other
Industries
Software Development and Security and Investigations
#J-18808-Ljbffr