> Markdown version of [/jobs/ext/4545252-iam-security-consultant-broadway-ny-hybrid](https://www.wearedevelopers.com/jobs/ext/4545252-iam-security-consultant-broadway-ny-hybrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM Security consultant - Broadway, NY Hybrid

- **Company:** Kanak Elite Services Inc
- **Location:** United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Active Directory, Amazon Web Services, Data Analysis, User Authentication, Authentication Protocols, Microsoft Azure, Cyber Security, Identity and Access Management, Python (Programming Language), OAuth, OpenID, Oracle (Applications), Windows PowerShell, Role-Based Access Control, Azure Active Directory, Anti-Phishing, Zero Trust Network Access, Security Assertion Markup Language (SAML), Session Management, SQL Databases, Scripting, Google Cloud, Okta, Cyberark, Technical Debt, Information Technology, SailPoint, ManageEngine
- **Published:** November 3, 2026
- **Apply:** https://www.thejobnetwork.com/job/c04673da-107a-487f-a21a-205d77446f2b/iam-security-consultant-broadway-ny-hybrid

## About the Role

* Bachelor's degree in Information Security, Computer Science, or related field (or equivalent experience).

 * 3-5 years of hands-on experience in Identity Governance & Administration (IGA).

 * Strong knowledge of Active Directory, Entra ID, and federated authentication protocols (SAML, OIDC, OAuth2).

Familiarity with one or more of the following platforms:

IGA: SailPoint, Saviynt, Oracle IDCS

PAM: BeyondTrust, CyberArk, ManageEngine PAM360

MFA/SSO: Microsoft Entra ID, Duo, Okta, Ping Identity

Working knowledge of Zero Trust, FIDO2, passwordless, and phishing-resistant MFA concepts.

Experience applying IGA controls for diverse user types (corporate, frontline, OT).

Strong analytical, documentation, and communication skills; ability to collaborate across technical and business teams.

Additional Skills and Information:

Experience with identity lifecycle automation and role-based access control (RBAC) modeling.

Understanding of privilege escalation risks, identity threat detection, and compliance frameworks (NIST 800-63B, CIS, TSA, etc.).

Scripting knowledge (PowerShell, Python, or SQL) for data analysis or automation.

Familiarity with cloud identity models (Azure, AWS, GCP

## Description

**Application Onboarding & Integration**

 * Partner with application owners to onboard and certify applications within the IGA platform (e.g., SailPoint, Saviynt, or Oracle).

 * Define and enforce access models, entitlements, and approval workflows for new and existing applications.

 * Establish least-privilege and segregation-of-duties (SoD) controls within IGA.

**Identity Security Posture & Technical Debt Reduction**

 * Identify and remediate identity risks such as orphaned accounts, excessive entitlements, and privileged access sprawl.

 * Contribute to ongoing cleanup initiatives for AD, Entra ID, and connected systems to align with modern identity hygiene standards.

 * Support implementation of risk-based access policies and automated lifecycle management processes.

**Authentication Modernization**

 * Support the adoption of phishing-resistant authentication methods, including FIDO2 security keys and passwordless sign-ins.

 * Collaborate with MFA and SSO platform teams to migrate legacy authentication flows to modern protocols (e.g., WebAuthn, OIDC, SAML).

 * Evaluate user experience, security impact, and deployment readiness across diverse user populations (corporate, frontline, OT).

**Federation & Access Management**

 * Configure and manage federated SSO integrations via Entra ID and other IdPs.

 * Apply conditional access and adaptive authentication policies based on user risk, device health, and context.

 * Coordinate with PAM teams to align privileged session management with federated access controls.

**Cross-Domain Collaboration**

 * Partner with security architecture, IAM engineering, and compliance teams to ensure IGA controls meet enterprise and regulatory standards.

 * Document and report on metrics related to access certifications, compliance posture, and identity lifecycle performance.

 * Provide operational support for IGA platform maintenance, upgrades, and new integrations.