IAM Engineer

Description

The Office of Technology and Innovation runs city technology work in New York City, including affordable broadband, cybersecurity protection and digital government services.

The IAM Engineer supports the design, administration, maintenance and improvement of the agency's identity and access management environment.

The role covers certificate lifecycle (PKI) work and enterprise IAM operations on Microsoft Entra ID and Active Directory, including access provisioning, authentication, group and role administration, policy enforcement and identity security controls.

You will also help with infrastructure modernization, day-to-day operations and project work on secure access, governance and service continuity.

Responsibilities

• Support the administration of AD CS and/or third-party certificate authorities, handling certificate issuance, renewal and revocation (CRL/OCSP).
• Assist with HSM operations and key ceremonies under the guidance of senior staff.
• Maintain and help run CLM tooling for certificate tracking, automation and reporting.
• Investigate certificate problems in production and pass complex trust chain or design issues to senior engineers.
• Apply established PKI standards and compliance guidelines such as NIST and CIS, and help keep documentation current.
• Handle both operational and engineering tasks, such as resolving identity issues, making access and authentication changes and supporting system integrations.
• Support governance and security initiatives, and contribute to special projects and strategic efforts as assigned.
• Work with infrastructure, security and application teams to keep IAM services reliable, secure and in line with agency goals.

Requirements

• A bachelor's degree from an accredited college and four years of satisfactory full-time experience in projects and policies related to the position, or;
• Education and/or experience equivalent to the option above.

Conditions

Based in Brooklyn, NY.

Because the work runs 24/7, you may be asked to work shifts that include weekends and/or nights or evenings.

Interested applicants with other civil service titles who meet the preferred requirements should also submit a resume.

Apply through the city jobs site at searching for Job ID 788633.

Submitting a resume does not guarantee an interview.

Appointments are subject to oversight approval.

Equal opportunity employer committed to a diverse workforce and a workplace free from discrimination and harassment.