Identity Access Management (Iam) Engineer

Remote: Monday- Friday; 9-5
C2C Candidates Welcome

JOB DESCRIPTION
The resource’s function is essential in securing the City's systems, and the mission critical services that rely on them requiring strong controls over the identities that manage these systems via privileged access. The deployment of a Privileged Access Management (PAM) solution across the City's information systems will ensure compliance with Citywide policies standards, procedures, and federally mandated regulations; reduce the security risks from password-only access, unauthorized access, and compromised credentials; decrease technical/administrative overhead for agencies by automating the creation, maintenance and removal of user identities; create more reliable information systems and increasing resiliency, and more efficient provision of services to New Yorkers enabled by technology.

SCOPE OF SERVICES

The Identity & Access Management Engineer will provide subject matter expertise for comprehensive PAM deployments in a large, distributed environment. The candidate will work closely with business, technical and application stakeholders to achieve project objectives, from onboarding new organizations to full production deployment for both workstreams.

TASKS:
The Identity & Access Management Engineer will:
1. Deploy the PAM solution to Windows and Linux servers; install session monitoring software.
2. Integrate solutions with high assurance level for on-premises, commercial off-the-shelf, and cloud-based applications with multi-factor authentication.
3. End-to-end solution installation: work with Infrastructure Management teams to ensure the introduction of the solution does not impact production environments.
4. Collaborate with Cybersecurity, Identity Management, Windows and Linux teams to track deployment activities, and mitigate unauthorized activity.
5. Update Active Directory roles and Group Policy Objects for privileged accounts.
6. Assist architecture teams in performing asset inventory, validating agency assets.
7. Develop playbooks to assist agencies ‘self-service’ their security posture; document server installations and processes; document gaps in Access Management processes and recommend controls to resolve gaps.
8. Host standardized training sessions on-site and virtually; develop content for customized training sessions; run workshops to assist agencies in configuring systems; facilitate annual refresher training.

MANDATORY SKILLS/EXPERIENCE

Note: Candidates who do not have the mandatory skills will not be considered
1. Minimum twelve (12) years of experience providing specialized knowledge of complex customer processes and requirements; applying technical expertise in defining, analyzing, validating, and documenting complex operation environments, states of technology and current engineering processes; conducting complex technical investigations through advanced research techniques, analysis or development phases of engineering projects.
2. Understanding privileged account lifecycle management.
3. Strong Active Directory skills including multi-factor, multi-domain, and multi-tenant environments; domain trust relationships, organizational units, rights inheritance, DNS and GPOs; group assignments and role delegations.
4. Willingness to travel within NYC for key meetings.

DESIRABLE SKILLS/EXPERIENCE:
1. Experience deploying PAM solutions in a large, distributed environment or a service provider environment.
2. Experience working with PAM systems such as Delinea
3. Experience working with MFA solutions such as Microsoft Azure AD MFA
4. Experience with MFA protocols and techniques with any of the major vendor products
5. Solid understanding of how Role Based Access Control (RBAC) works in large, distributed environments.

Job Type: Contract

Pay: $55.00 - $60.00 per hour

Expected hours: 35 per week

Benefits:

• 401(k)
• Dental insurance
• Health insurance

Compensation package:

• 1099 contract

Experience level:

• 11+ years

Schedule:

• Monday to Friday

Experience:

• PAM: 10 years (Preferred)
• Linux: 8 years (Preferred)
• RBAC: 5 years (Preferred)

Work Location: Remote