> Markdown version of [/jobs/ext/551718-identity-and-access-management-iam-engineer](https://www.wearedevelopers.com/jobs/ext/551718-identity-and-access-management-iam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity and Access Management (IAM) Engineer - **Company:** Paramint LLC - **Location:** New York, NY, United States - **Salary:** $156,000.0 - $176,800.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Microsoft Azure, Cyber Security, Identity and Access Management, Lightweight Directory Access Protocols (LDAP), OAuth, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Security Assertion Markup Language (SAML), System Availability, ManageEngine - **Published:** June 13, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=e482b01a8f45194a ## About the Role Do you have experience in SSO?, * Minimum 12 years of hands-on experience designing, implementing, and supporting Identity and Access Management (IAM) solutions * Extensive experience with: Active Directory / Microsoft Entra ID (Azure AD) / LDAP / SAML / OAuth * Demonstrated experience delivering complex enterprise IAM projects * Strong knowledge of Role-Based Access Control (RBAC) methodologies * Exceptional analytical, troubleshooting, and problem-solving skills * Ability to translate business requirements into secure technical solutions * Strong written and verbal communication skills * Experience collaborating with technical and business stakeholders across large organizations Desirable Skills / Experience * PowerShell scripting and automation * Microsoft Azure administration * Advanced Active Directory architecture and design * Browser security and browser control technologies * Experience supporting highly available, mission-critical environments * Government or public sector experience, Confirmation of ability to work in the required hybrid schedule, * Are you willing to work under a W2 Contract? (This is NOT available for C2C, C2H or 1099, and NO sponsorship) ## Description Paramint LLC is seeking a highly experienced Identity and Access Management (IAM) Engineer (Specialist 3) to support the Infrastructure Resilience Identity and Access Management team for a major New York City government agency. This role will provide engineering, administration, and operational support for highly critical systems and infrastructure supporting multiple city agencies, including 24x7 operational environments such as NYC 311. The selected candidate will work across cloud and on-premises identity platforms, ensuring secure, resilient, and scalable access management solutions. The IAM Engineer will serve as a senior technical resource responsible for Active Directory, Microsoft Entra ID, ManageEngine solutions, IAM operations, and Tier 2/3 support activities., Identity & Access Management Engineering * Design, implement, maintain, and optimize enterprise IAM solutions * Develop and manage role-based access control (RBAC) models * Translate business and security requirements into IAM technical solutions * Support enterprise authentication, authorization, and identity governance initiatives Active Directory Engineering & Administration (30%) * Administer and maintain Active Directory environments * Design and implement directory services enhancements * Troubleshoot complex AD issues and perform root cause analysis * Support hybrid identity and synchronization solutions Microsoft Entra ID Engineering & Administration (40%) * Administer Microsoft Entra ID (formerly Azure Active Directory) * Manage authentication, federation, conditional access, and identity lifecycle processes * Support SAML, OAuth, and LDAP integrations * Implement identity security best practices and governance controls ManageEngine BSP Engineering & Operations (20%) * Administer and support ManageEngine identity and security solutions * Perform configuration, troubleshooting, and operational support activities * Support ongoing enhancements and maintenance initiatives IAM Tier 2/3 Support (10%) * Provide advanced troubleshooting and incident resolution * Participate in after-hours support activities as required * Support critical systems requiring high availability and 24x7 operational coverage * Assist with escalation management and service restoration efforts ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)