IAM Engineer

Scope Of Services

• Assess and develop a roadmap for OTI’s disparate directories consolidation
• Provide guidance and implementation support for integration with Entra and other IAM
  
  

security enhancements

• Architect and implement Citywide-level PKI modernization, including infrastructure
  
  

changes for reduced certificate lifespans

• Advice on governance, compliance, lifecycle management and automation of digital
  
  

certificates

• Lead migration planning, risk assessment, and mitigation for directories and PKI
  
  

modernization

• Perform technical knowledge transfer, upskilling internal teams on new infrastructure
  
  

and practices

Tasks

• PKI Architecture, Engineering and Administrator – 40%
• Entra ID Architecture, Engineering and Administrator – 30%
• Directory Architecture, Engineering and Administrator – 20%
• IAM Level 3 Technical Support – 10%
  
  

Mandatory Skills/Experience

• 12 years in IAM architect, engineering, administration and operations with focus on
  
  

directory services and PKI

• Deep expertise in Active Directory (on-prem and hybrid), Entra ID, and eDirectory
• Hands-on experience in designing and operating Microsoft PKI, including certificate
  
  

authority management, certificate lifecycle, and automation

• Solid understanding of modern authentication/authorization protocols (OAuth, SAML,
  
  

Kerberos, etc.)

• Experience with security roadmap development, risk assessment, and compliance
  
  

(NIST, ISO, SOX or PCI-DSS)

• Strong documentation, communication, and stakeholder management skills
  
  

Desirable Skills/Experience

• Experience with cloud PKI services
• Familiarity with Entra ID Governance, Conditional Access Policy, and modern security
  
  

controls

• Experience automating PKI workflows (API/script-based certificate management)
• Multi-forest, multi-tenant IAM architecture expertise
• Prior experience working with Government /State agency
• Working knowledge of enterprise ITSM, change management, and project management
  
  

methodologies

Skills: entra id,pci-dss,architecture,iso,oauth 2.0,azure active directory,edirectory,saml,sox,pki,iam,nist