Identity Management, Authentication & Authorization SME

Join a leading organization as the technical authority in Identity and Access Management (IAM), authentication, and authorization. Leverage your broad expertise to implement governance standards, enhance security, and drive resiliency in a dynamic recovery environment. This is your opportunity to shape identity-centric security strategies and work alongside top-tier professionals in cybersecurity, infrastructure, and application domains., Serve as the subject matter expert for IAM, authentication, and authorization technologies across the enterprise.

• Oversee IAM governance processes, including user provisioning/deprovisioning, access certification, and entitlement management.
• Lead the implementation and management of RBAC, ABAC, SSO, MFA, and PAM solutions.
• Define and maintain standards, policies, and best practices for authentication and authorization.
• Support and integrate modern identity protocols (SAML, OAuth 2.0, OpenID Connect, Kerberos, LDAP) across multiple platforms.
• Collaborate with cybersecurity and IT teams to ensure secure, compliant access management and support Zero Trust initiatives.
• Drive audit, compliance, and regulatory activities related to identity and access controls.
• Troubleshoot and resolve complex IAM issues, providing thorough root cause analysis and solutions.

Extensive hands-on experience in IAM, authentication, authorization, and identity governance.

• Proven expertise in access lifecycle management and entitlement models.
• Broad knowledge of IAM platforms (SailPoint, Okta, Ping Identity, Microsoft Entra ID/Azure AD, CyberArk, ForgeRock, Saviynt).
• Mastery of authentication and federation standards: SAML, OAuth 2.0, OpenID Connect, LDAP, Kerberos, JWT.
• Experience with directory services, particularly Active Directory.
• Ability to work onsite in New York, NY 3-4 days per week.
• Must be authorized to work in the US without current or future sponsorship.

Preferred Skills

• Industry certifications: CISSP, CISM, CIAM, or vendor-specific (SailPoint, Okta, Microsoft, CyberArk).
• Experience with Zero Trust Architecture and identity-centric security frameworks.
• Familiarity with DevSecOps and IAM integration in CI/CD pipelines.
• Knowledge of API security, machine-to-machine authentication, and regulated environments (e.g., financial services)., Candidates must be able to work now and in the future without the need of sponsorshipCandidates must be able to work 3 - 4 days per week onsite in New York NYPlease note this role is looking for someone with a wide range of experience in the IAM space Not looking for someone who is tool specific focused but rather someone with a broad knowledge in the IAM space to help with implementing governance sta authentication Authorization and entitlement governance in a recovery environment The ideal candidate will have deep expertise in IAM architecture and will understand identity from both a security and operational resiliency standpoint This position ensures alignment with secur compliance and business requirements for a backup and resiliency environment Key Responsibilities:* Serve as the Subject Matter Expert for Identity and Access Management (IAM) authentication and authorization technologies* Oversee IAM governance including user provisioning/deprovisioning and access certification* Implement and manage Role-Based Access Control (RBAC) Attribute-Based Access Control (ABAC) single sign-on (SSO) Multi-Factor Authentication (MFA) and Privileged Access Management (PAM)* Define and maintain authentication and authorization standards policies and best practices* Support the implementation of modern identity protocols such as SAML OAuth 20 OpenID Connect Kerberos and LDAP* Partner with cybersecurity infrastructure and application teams to ensure secure access management* Provide guidance on Zero Trust principles as they relate to identity-centric security* Support audit regulatory and compliance activities related to identity and access controls* Troubleshoot complex IAM issues and provide root cause analysis Experience: Extensive experience in Identity and Access Management authentication and authorization is necessary A strong understanding of identity governance and administration (IGA) access lifecycle management and entitlement models is required Technical Skills: Hands-on experience with IAM tools/platforms such as SailPoint OKTA Ping Identity Microsoft Entra ID / Azure AD Cyberark ForgeRock or Saviynt is needed Expertise in authentication and federation standards including SAML OAuth 20 OpenID Connect LDAP Kerberos and JWT is also required Familiarity with directory services like Active Directory is expected Preferred Qualifications:* Industry certifications such as CISSP CISM CIAM or vendor-specific certifications (SailPoint OKTA Microsoft CyberArk) are considered a plus* Experience with Zero Trust Architecture and identity-centered security frameworks is beneficial* Familiarity with DevSecOps and IAM integration in CI/CD pipelines* Knowledge of API security and machine-to-machine aut

Opportunity to lead IAM strategy in a high-impact, resilient environment.

• Collaborate with multidisciplinary teams at the forefront of security innovation.
• Visibility and growth in a critical, evolving domain within the organization.
• Access to cutting-edge technologies and ongoing professional development.