Identity and Access Management Engineer (Cybersecurity)

Location: New York, NY 10036, United States

Salary: $225,000–$325,000 per year

What you will do

• Lead the administration and evolution of IAM authentication and authorization systems.
• Implement and manage Kerberos, PKI, OIDC, and FIDO2-based authentication solutions.
• Support identity platforms including Active Directory, ADFS, ADCS, and Entra ID.
• Develop passwordless remote access and cross-platform certificate enrollment and management initiatives.
• Provide guidance on secure access practices and collaborate with cross-functional teams.

Requirements

• 7–10 years of relevant IAM experience in enterprise environments.
• Hands-on expertise with Kerberos, PKI, OIDC, FIDO2, Active Directory, ADFS, ADCS, and Entra ID.
• Experience implementing passwordless authentication with Windows Hello, YubiKeys, or Passkeys.
• Ability to prototype integrations; advanced coding skills are beneficial but not required.
• Strong communication and collaboration skills.
• Bachelor’s degree in Computer Science, Information Security, or a related field preferred.

Nice to have

• Experience with remote access solutions and zero-trust security models.
• Familiarity with scripting or automation tools for IAM processes.
• Security certifications or standards experience related to identity management.