Our goal is to solve problems and deliver results for our clients. At Cloud and Things, you can be a part of transforming the public sector's IT environment. Our team is on the forefront of helping to solve the government's most complex IT challenges. If you are seeking a role that offers the opportunity to work on rewarding projects, consider a career with Cloud and Things.

Overview:

We are seeking a Security Engineer who will support the New York City Employee Retirement System's (NYCERS) Identify and Access Management (IAM) team to lead the ongoing modernization of critical IAM/PAM infrastructure. The IAM team is responsible for the design and implementation of various IAM technologies including Microsoft Active Directory, Federation Services, Azure Active Directory, Identity Governance and Administration (IGA) and Privileged Access Management. In this role, you will serve as a subject matter expert for IAM team to provide hands-on technical guidance and help with the implementation for various IAM and IGA tools and processes. We are looking for someone who can be a team player working closely with NYCERS Information Security team to expand the integration of identity management solutions with internal and external applications, also support day-to-day administration, reporting, troubleshooting, and operations of the Identity Management environment.

Duties:

• Provide leadership in modernizing the IAM/PAM infrastructure, focusing on strategy, direction, and implementation.

• Serve as a subject matter expert, offering hands-on technical guidance and support for IAM and IGA tools and processes.

• Collaborate with the NYCERS Information Security team to integrate identity management solutions with internal and external applications.

• Support day-to-day administration, reporting, troubleshooting, and operations of the Identity Management environment.

• Manage escalations, set priorities, and develop risk mitigation strategies.

• Design, implement, and support PAM/IAM backend infrastructure and IGA platform according to best practices.

• Develop and implement procedures, runbooks, and documentation to support PAM/IAM services.

• Onboard servers and users to PAM and IGA services.

• Troubleshoot and resolve complex identity, authentication, authorization, entitlement, permissions, and integration issues.

• Administer Windows servers, hybrid multi-tenant environments, and cloud platforms.

• Maintain advanced knowledge of modern authentication technologies and concepts.

• Perform other duties as assigned for information security projects and initiatives.

Mandatory Skills/ Experience:

• Provide strategy, direction and leadership in incorporating all parts of IGA (access request, provisioning, de-provisioning, access review, and solving complex IAM related issues.

• Experience in managing escalations, setting priorities and risk mitigation strategies.

• Experience designing, implementing, managing and engineering support for PAM/IAM backend infrastructure and IGA Platform.

• Ability to lead the development and implementation procedures, runbooks, and documents to support the PAM/IAM services.

• Solid knowledge of SailPoint, Cisco ISE, PAM, and MFA solutions.

• Proficiency in Python Scripting.

• Experience in troubleshooting and resolving complex identity, authentication, authorization, entitlement, permissions and integration problems.

• Administration skills for Windows 2012/2016/2019 server- Forest, Domain trust, AD, DFS, DNS, WINS, DHCP, Group Policy, Distribution lists, Windows folder security, and IP filter.

• Administration skills for hybrid multi-tenant environments, including Microsoft Azure and Office 365, Amazon Web Services Cloud Platform environments; Microsoft Entra ID, and on-premise Active Directory.

• Advanced knowledge of modern authentications technologies and concepts such as SAML, Federation, SSO, OPenID, OAuth, Privilege Access Management (PAM), and Multi-Factor Authentication (MFA).

• Working knowledge of SailPoint and Cisco ISE (Secure Workload and TrustSec)

• CISSP, or other IAM tool specific security certifications

• Active LinkedIn account.

Desirable Skills/ Experience:

• A baccalaureate degree from an accredited college and 7 years of satisfactory full-time experience in IAM technologies working Hybrid Multi-cloud, multi-tenant environment including Active Directory, Azure Active Directory, Google Cloud Platform and AWS.

• 5 Years' experience managing and administering IAM tools and processes, Role Based Access Controls (RBAC), Privileged Access Management (PAM) and IGA platforms.

• Understanding of cloud architecture Azure AD/Entra ID, AWS, Salesforce.

• Experience providing oversight and assessing security controls for IaaS, PaaS, and SaaS services, while collaborating with system integrators and NYCERS teams to deliver reliable and scalable security capabilities.

• Ability to oversee and lead the implementation of security solutions, develop technical, and reference architectures throughout the project duration.

• Experience assessing and reviewing end-to-end secure integrations including web services and APIs.

• Experience working closely with NYCERS security team and third-party system integrators on security engineering related issues and resolving the issues without affecting the overall project delivery timelines.

Cloud and Things complies with all applicable federal, state, and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or any other category protected by applicable federal, state, or local laws.