Identity and Access Management (IAM) Engineer

About the role

We are seeking an experienced Identity and Access Management (IAM) Engineer to support critical projects for a major technology client. The role is hybrid, with two days onsite in Brooklyn and three days remote, and involves 24x7 availability for cloud and on‑premises services.

Key responsibilities

• Design, implement, and maintain Active Directory environments (≈30% of time).
• Support and administer Microsoft Entra ID/Azure AD, including identity solutions in cloud environments (≈40%).
• Engineer and operate ManageEngine BSP solutions (≈20%).
• Provide Tier 2/3 IAM technical support and after‑hours coverage (≈10%).
• Collaborate with infrastructure and application teams to troubleshoot authentication and access issues.

Required profile

• Minimum 12 years of hands‑on experience designing, implementing, and maintaining IAM solutions.
• Proven expertise with Active Directory, Entra ID, LDAP, SAML and OAuth protocols.
• Strong knowledge of RBAC methodologies and ability to translate business requirements into technical designs.
• Excellent analytical, troubleshooting and communication skills for cross‑team collaboration.

Required skills

• Active Directory
• Microsoft Entra ID / Azure Active Directory
• LDAP
• SAML
• OAuth
• PowerShell scripting
• ManageEngine BSP
• RBAC

What we offer

• Hourly rate of $75‑$80.
• Hybrid work model (2 days onsite, 3 days remote).
• Fixed‑term assignment from July 2026 to July 2027 (35 hours/week).