Identity and Access Management (IAM) Engineer (RI)
Stratford Solutions Inc. · New York, NY
$187,200–$208,000
Jul 20, 2026
New York, NY
Jul 22, 2026
What this job asks for AI summary
A contract IAM Engineer role focused primarily on Entra ID and Active Directory engineering and administration, with additional responsibilities covering ManageEngine BSP platform operations and Tier 2/3 identity support. The position suits a seasoned identity professional with at least 12 years of hands-on IAM experience across hybrid environments, including strong knowledge of RBAC, identity lifecycle management, and scripting for automation. Some off-hours on-call coverage is required.
Senior level · 12+ years · New York-Newark-Jersey City, NY-NJ-PA · Contract
Pay in the description: $90–$100/hr
Posted 2 times — it's one opening, so apply once.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $143,559 (middle half $110,181–$179,574). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (8)
The role is a 12-month contract, 35 hours/week, hybrid (3 days onsite at 2 Metrotech Center, Brooklyn, NY; 2 days remote) — remote=false reflects that onsite attendance is required.
SOC classification is a judgement call: the role is primarily IAM engineering (identity governance, access management, directory services) which sits between Information Security Analysts (15-1212) and Network/Systems Administrators (15-1244). The security governance and IAM platform design emphasis tips it toward 15-1212.
ManageEngine (referenced as 'MEBSE' — ManageEngine Browser Security Plus/Enterprise) is called out explicitly in the scope of services and task breakdown, so it is treated as a required platform despite not appearing in a formal 'Required Skills' bullet.
PowerShell appears in both the mandatory skills block (as part of the scripting requirement) and again under Desirable Skills. It is treated as required based on its mandatory-section placement; the desirable mention is redundant.
Azure appears only in the Desirable Skills section alongside Entra/Active Directory and 'Browsers Control'; treated as preferred accordingly.
'Browsers Control' in the Desirable section is too vague to map to a specific named technology and has been omitted.
The 12-year minimum experience requirement is a role-level gate captured in total experience; the seniority band is Senior (not Staff/Principal) as the JD describes a hands-on engineering and operations role without explicit org-wide or cross-team architectural authority.
Posting is for a contract engagement — the market benchmarks below price full-time roles, so read the comp comparison with that in mind.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.