IAM Engineer

Job Description

Location : Remote from New York, NY

\n

Please only apply if you are able to work hybrid/remote from New York City, NY

\n

\n

This is a Full-Time W2 position, please apply only if you are able to work. No C2C or C2H will be considered at this moment.

\n

\n

Job title: IAM AD Engineer

\n

Employment type: Full-time

\n

\n

About the role

\n

We are seeking a qualified IAM AD Engineer to support in the design, deployment, management, and troubleshooting of Active Directory environments within AWS Cloud. This role is responsible for performing the essential functions listed below and requires the skills and experience described. In this role, you will focus on Active Directory creation, testing, deployment standards, security tooling integration, and operational support across both AWS Managed and client-managed AD infrastructure.

\n

\n

Minimum qualifications

\n

\n
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.
\n
• Demonstrable hands-on experience in Identity and Access Management (IAM) and Active Directory administration.
\n
• In-depth technical experience with Active Directory fundamentals: Group Policies (GPOs), LDAP connectivity, Kerberos / NTLM authentication, OU design, user/group management best practices, and AD backup and recovery management.
\n
• Practical experience with AWS Cloud management concepts, including AWS Managed Microsoft AD and self-managed (EC2/non-AWS-managed) Active Directory in AWS.
\n
• Core infrastructure expertise in DNS, vLANs, and Windows Event Collection concepts/options.
\n
• Strong technical documentation and verbal/written communication skills.
\n

\n

\n

Preferred qualifications

\n

\n
• Relevant AWS or Microsoft certifications (e.g., AWS Certified SysOps Administrator, AWS Certified Security – Specialty, or Microsoft Certified: Identity and Access Administrator).
\n
• Hands-on experience integrating Active Directory with SIEM platforms, enterprise automation workflows, and centralized security tooling.
\n
• Demonstrated experience designing entitlement delegation models and disaster recovery / backup-restore procedures for enterprise-scale environments.
\n
• Proven analytical and advanced troubleshooting skills for complex directory and cloud infrastructure issues.
\n

\n

\n

Job responsibilities

\n

\n
• Perform Active Directory creation, configuration, and testing within AWS (both AWS Managed Microsoft AD and client-managed AD on EC2).
\n
• Manage and maintain Development Active Directory environments hosted in AWS.
\n
• Author and maintain comprehensive deployment and management standards for AD in AWS, covering entitlement delegation, automation workflow integration, SIEM event collection, and required security tooling.
\n
• Design, test, and document end-to-end AD backup and disaster recovery procedures.
\n
• Troubleshoot, diagnose, and resolve client directory service issues and escalation tickets within AWS AD environments.
\n
• Collaborate with cloud, security, and infrastructure teams to ensure directory services align with security baselines and organizational compliance standards.
\n

\n

\n

Other Requirements:

\n

\n
• Ability to perform computer-based work in a standard home office environment, with or without a reasonable accommodation.
\n
• Vendor/Submission Verification: All candidates must complete a live screening with the vendor prior to submission. Candidate submissions must include the required attestation statement confirming identity verification and screening date.
\n

\n

\n

Compensation:

\n

The anticipated base pay range for this position is $110k-130k depending on experience, skills, location, and internal equity.

\n

\n

Benefits:

\n

Benefits for this position will likely include the following:

\n

\n
• Unlimited paid time off.
\n
• Healthcare benefits.
\n
• Dental benefits.
\n
• Vision benefits.
\n
• Disability insurance.
\n
• Life insurance benefits.
\n
• Retirement benefits, including 401(k) and a potential company match.
\n
• Parental leave for both birthing (up to 14 weeks of paid leave) and non-birthing parents (up to 4 weeks paid leave), as well as adoption leave (up to 8 weeks of paid leave), subject to qualifications.
\n
• Child hospitalization leave (up to 15 paid calendar days per year), subject to qualifications.
\n
• “Be kind to yourself day” on your anniversary (subject to terms and conditions).
\n
• Graduation and birthing gifts, subject to eligibility.
\n
• Paid Jury duty (up to 4 weeks a year), subject to eligibility.
\n
• Paid moving days (up to 2 days a year), subject to eligibility.
\n