Brooklyn, NY

Salary
—
Posted
Jul 31, 2026
Location
Brooklyn, NY
Last confirmed open
Nov 9, 2026

What this job asks for AI summary

An IAM Engineer role at New York City's Office of Technology and Innovation, focused on identity and access management operations including PKI/certificate lifecycle management, Active Directory, and Microsoft Entra ID. The position handles day-to-day operational tasks — certificate issuance, renewal, revocation, HSM support, access provisioning, and authentication services — while also contributing to infrastructure modernization and security governance projects. Shift flexibility including nights and weekends is required.

Mid level · 4+ years · New York-Newark-Jersey City, NY-NJ-PA · Full-time

Must have (8)
Active DirectoryPKIAD CSHSMCLMCRL/OCSPNISTCIS

We read this from the posting text with AI. Skim the description below before ruling yourself out.

How this req sits in the market our data

What won't set you apart
Active Directory50%NIST40%

Most people in this occupation already list these. Still required — just not what gets you shortlisted.

What the occupation pays Median $143,559 (middle half $110,181–$179,574).

Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Aug 2, 2026. It is a model, not a headcount.

Why we read it this way (5)

The role sits at the boundary between IAM/security analysis (15-1212) and systems administration (15-1244). Its primary day-to-day work — certificate lifecycle management, PKI operations, identity governance, and access controls — leans toward security analysis, so 15-1212 was chosen; however, the operational infrastructure administration duties (AD, Entra ID provisioning, HSM key ceremonies) make 15-1244 a credible alternative.

No salary range is published in the posting.

The minimum qualification is a bachelor's degree OR equivalent experience, so the degree requirement is set to None.

The civil service title referenced is 'IT Security Specialist – 95622'; the four-year experience requirement is drawn from the civil service qualification standard attached to that title.

All skills are drawn from the responsibilities section, which functions as the primary requirements block for this posting; no separate 'preferred' or 'nice to have' section exists.

Read the full posting

The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.

Apply

Apply on employer site ↗