Description

You will design and implement identity and access management solutions for complex enterprise environments, focusing on directory consolidation and PKI modernization.

This role is on-site.

Responsibilities

• Assess and develop roadmaps for consolidating disparate client directories.
• Architect and implement citywide-level PKI modernization, including infrastructure changes for reduced certificate lifespans.
• Lead migration planning, risk assessment, and mitigation for directories and PKI efforts.
• Provide guidance and implementation support for integrating with Entra ID and applying IAM security enhancements.
• Perform technical knowledge transfer to upskill internal teams on new infrastructure and practices.

Required Skills

• 5+ years in IAM architecture, engineering, administration, and operations.
• Deep expertise in Active Directory (on-prem and hybrid), Entra ID, and eDirectory.
• Hands-on experience designing and operating Microsoft PKI, including certificate authority management and lifecycle automation.
• Strong understanding of authentication/authorization protocols: OAuth, SAML, and Kerberos.
• Experience developing security roadmaps, conducting risk assessments, and ensuring compliance (NIST, ISO, SOX, PCI-DSS).
• Ability to work cross-functionally with technical and business stakeholders.
• Strong documentation, communication, and stakeholder management skills.

Preferred Skills

• Experience automating PKI workflows using APIs or scripts for certificate management.
• Familiarity with Entra ID Governance, Conditional Access Policy, and modern security controls.

Key Skills

Education

Any Graduate