Senior Identity Access Management Engineer Remote

Job Title: Senior Identity & Access Management Engineer

Location: Remote

Duration: 15 months

12 years candidate

Job Description:

T he senior Identity & Access Management Engineer will provide subject matter expertise for comprehensive PAM deployments in a large distributed environment. The candidate will work closely with business technical and application stakeholders to achieve project objectives from onboarding new organizations to full production deployment for both workstreams.

T ASKS:

T he Identity & Access Management Engineer will:

Dep loy the PAM solution to Windows and Linux servers; install session monitoring software.

Integ rate solutions with high assurance level for onpremises commercial offtheshelf and cloudbased applications with multifactor authentication.

E ndtoend solution installation: work with Infrastructure Management teams to ensure the introduction of the solution does not impact production environments.

Co llaborate with Cybersecurity Identity Management Windows and Linux teams to track deployment activities and mitigate unauthorized activity.

Upda te Active Directory roles and Group Policy Objects for privileged accounts.

A ssist architecture teams in performing asset inventory validating agency assets.

De velop playbooks to assist agencies selfservice their security posture; document server installations and processes; document gaps in access management processes and recommend controls to resolve gaps.

Ho st standardized training sessions onsite and virtually; develop content for customized training sessions; run workshops to assist agencies in configuring systems; facilitate annual refresher training.

MANDATORY SKILLS/EXPERIENCE Note: Candidates who do not have the mandatory skills will not be considered

Minimum twelve (12) years of experience providing specialized knowledge of complex customer processes and requirements; applying technical expertise in defining analyzing validating and documenting complex operation environments states of technology and current engineering processes; conducting complex technical investigations through advanced research techniques analysis or development phases of engineering projects.

Understanding privileged account lifecycle management.

Strong Active Directory skills including multifactor multidomain and multitenant environments; domain trust relationships organizational units rights inheritance DNS and GPOs; group assignments and role delegations.

Willingness to travel within NYC for key meetings.

DESIRABLE SKILLS/EXPERIENCE:

Experience deploying PAM solutions in a large distributed environment or a service provider environment.

Experience working with PAM systems such as Delinea

Experience working with MFA solutions such as Microsoft Azure AD MFA

Experience with MFA protocols and techniques with any of the major vendor products

Solid understanding of how Role Based Access Control (RBAC) works in large distributed environments.