IAM/Privileged Access Management Architect

Title: IAM /Privileged Access Management Architect Location: NYC, New York 10004 Work Mode- Hybrid - 3 Days Onsite and 2 Days Remote Duration: 12 month+ Contract Client needs an IAM /PAM Architect Responsibilities Access Administration Oversight: Manage identity provisioning/deprovisioning workflows, access requests, and escalations for employees, contractors, and vendors. Directory and Group Management: Support governance and lifecycle of AD / Azure / Entra ID security groups and distribution lists, including group ownership, naming conventions, and expiration policies. Joiner-Mover-Leaver (JML) Workflow Execution: Monitor and refine onboarding/offboarding processes via SailPoint or similar IAM platforms. Policy & Controls Alignment: Assist in implementing least-privilege access, SoD checks, and audit remediation efforts for regulated applications. Team Leadership & Guidance: Act as a lead or escalation point for junior team members. Help manage queue priorities, ensure SLA compliance, and drive operational consistency. IAM Documentation & SOPs: Maintain up-to-date documentation of access policies, procedures, and exception handling workflows. Application Access Support: Liaise with app owners and business units to define and implement role-based access models. Qualifications Strong 7+ years of experience in IAM /PAM , preferably in enterprise or public sector environments Familiarity with tools like SailPoint IIQ, Azure Entra ID, Active Directory, ServiceNow, and MFA (Duo, Microsoft, etc.) Strong understanding of access lifecycle, group management, and least-privilege models Basic scripting or workflow logic knowledge (e.g., PowerShell or automation platforms) is a plus Hands‑on experience with AD, Entra ID, Linux, and at least one major cloud platform (Azure, AWS, or GCP). Strong knowledge of vaulting technologies and endpoint privilege management practices (least privilege, privilege elevation, application control). Proficiency with authentication methods: MFA, SSO, passwordless, Kerberos, and certificate-based access. Familiarity with NIST 800-63B, Zero Trust frameworks, ITDR, and cloud security standards (CIS, CSA, etc.). Demonstrated reliability and ownership in operational support environments Experience with privileged access, RBAC design, or CIAM platforms Audit or compliance exposure (e.g., NIST, SOX, NYS Cyber Regs) Prior experience mentoring or managing small teams #J-18808-Ljbffr InterSources Inc