> Markdown version of [/jobs/ext/4599420-iam-engineer](https://www.wearedevelopers.com/jobs/ext/4599420-iam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM Engineer

- **Company:** Blankfactor LLC
- **Location:** New York, NY, United States (Remote available)
- **Salary:** $110,000.0 - $130,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Microsoft Windows, Active Directory, Amazon Web Services, Amazon Elastic Compute Cloud, Cloud Computing, Cyber Security, Disaster Recovery, Integrated Windows Authentication, Domain Name System (DNS), Identity and Access Management, Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), Security Information and Event Management, Systems Integration, Virtual Local Area Networks, Information Technology, CIS Benchmarks
- **Published:** November 6, 2026
- **Apply:** https://www.juju.com/job/2_174259852

## About the Role

* Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.
 * Demonstrable hands-on experience in Identity and Access Management (IAM) and Active Directory administration.
 * In-depth technical experience with Active Directory fundamentals: Group Policies (GPOs), LDAP connectivity, Kerberos / NTLM authentication, OU design, user/group management best practices, and AD backup and recovery management.
 * Practical experience with AWS Cloud management concepts, including AWS Managed Microsoft AD and self-managed (EC2/non-AWS-managed) Active Directory in AWS.
 * Core infrastructure expertise in DNS, vLANs, and Windows Event Collection concepts/options.
 * Strong technical documentation and verbal/written communication skills., * Relevant AWS or Microsoft certifications (e.g., AWS Certified SysOps Administrator, AWS Certified Security - Specialty, or Microsoft Certified: Identity and Access Administrator).
 * Hands-on experience integrating Active Directory with SIEM platforms, enterprise automation workflows, and centralized security tooling.
 * Demonstrated experience designing entitlement delegation models and disaster recovery / backup-restore procedures for enterprise-scale environments.
 * Proven analytical and advanced troubleshooting skills for complex directory and cloud infrastructure issues.

## Description

We are seeking a qualified IAM AD Engineer to support in the design, deployment, management, and troubleshooting of Active Directory environments within AWS Cloud. This role is responsible for performing the essential functions listed below and requires the skills and experience described. In this role, you will focus on Active Directory creation, testing, deployment standards, security tooling integration, and operational support across both AWS Managed and client-managed AD infrastructure., * Perform Active Directory creation, configuration, and testing within AWS (both AWS Managed Microsoft AD and client-managed AD on EC2).

 * Manage and maintain Development Active Directory environments hosted in AWS.
 * Author and maintain comprehensive deployment and management standards for AD in AWS, covering entitlement delegation, automation workflow integration, SIEM event collection, and required security tooling.
 * Design, test, and document end-to-end AD backup and disaster recovery procedures.
 * Troubleshoot, diagnose, and resolve client directory service issues and escalation tickets within AWS AD environments.
 * Collaborate with cloud, security, and infrastructure teams to ensure directory services align with security baselines and organizational compliance standards.

Other Requirements:

 * Ability to perform computer-based work in a standard home office environment, with or without a reasonable accommodation.
 * Vendor/Submission Verification: All candidates must complete a live screening with the vendor prior to submission. Candidate submissions must include the required attestation statement confirming identity verification and screening date.