The Corporate · Brooklyn

Salary
Posted
Jul 20, 2026
Location
Brooklyn
Last confirmed open
Jul 22, 2026

What this job asks for AI summary

A senior-level identity and access management engineering role with a New York City government agency, requiring at least 12 years of hands-on IAM experience. The work centers on designing and maintaining enterprise IAM solutions — covering identity governance, lifecycle management, RBAC, and cloud/hybrid integrations — with significant automation responsibilities using scripting and APIs. Suits a seasoned IAM specialist comfortable operating across complex, multi-stakeholder environments.

Senior level · 12+ years · New York-Newark-Jersey City, NY-NJ-PA · Contract

Must have (9)
Active DirectoryPKILDAPSAMLOAuthRBACPowerShellPythonREST APIs
Nice to have (4)
Chrome Enterprise or Edge PoliciesTerraformAzure DevOpsGitHub Actions

“or” means any one of them counts — you don't need all of them.

We read this from the posting text with AI. Skim the description below before ruling yourself out.

How this req sits in the market our data

What won't set you apart
Python51%Active Directory50%PowerShell45%

Most people in this occupation already list these. Still required — just not what gets you shortlisted.

What the occupation pays Median $143,559 (middle half $110,181–$179,574).

Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.

Why we read it this way (6)

This is a 1-year contract engagement (hybrid: 3 days onsite in Brooklyn, NY / 2 days remote); classified as Contract accordingly.

The role is IAM-specialist focused — closer to identity security engineering than general information security analysis. 15-1212 (Information Security Analysts) is the best available fit; 15-1299 is noted as a runner-up given the deep engineering/automation emphasis.

Identity Governance capabilities (access reviews, certification workflows, role mining, provisioning automation) and identity lifecycle management (joiner/mover/leaver, attribute governance) are hard-gated in the mandatory skills block but name no specific vendor platform (e.g., SailPoint, Saviynt, CyberArk) — captured via the surrounding named technologies rather than as a generic concept.

Zero-trust architecture and regulatory compliance (NIST, ISO 27001, NYC local laws) appear under Desirable Skills and name no concrete tool, so they are omitted per the no-generic-concepts rule.

No compensation figures were provided in the posting.

Posting is for a contract engagement — the market benchmarks below price full-time roles, so read the comp comparison with that in mind.

Read the full posting

The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.

Apply

Apply on employer site ↗