IAM/RBAC Engineer
New York, NY
Category: Engineer
Industry: Financial Services
Reference ID: JN -062026-107581
Date Posted: 06/23/2026
Shortcut: http://careers.eliassen.com/wanedj
Description:
Hybrid 4 days onsite in either New York, NY or Pitt, PA or Lake Mary, FL
Our client seeks an IAM/RBAC Engineer to design, implement, and administer access controls in Microsoft Entra ID and Azure RBAC. The contractor will enforce least-privilege, govern privileged and remote access, strengthen authenticator management, and maintain audit-ready documentation and monitoring across Azure environments.
This is a contract to hire opportunity. Applicants must be willing and able to work on a w2 basis and convert to FTE following contract duration. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.
Rate: $82.00 to $92.00/hr. w2
Responsibilities:
- Define and maintain an enterprise Azure RBAC role taxonomy and document role-to-permission mappings.
- Map permissions to roles and enforce least-privilege via security groups and scoped role assignments.
- Eliminate broad direct privilege assignments and track changes to access models.
- Implement PIM and JIT workflows for elevated access with approvals and time-bound permissions.
- Establish standards for VPN, jump hosts, and privileged session configurations and restrictions.
- Define and manage emergency access procedures with incident notification and post-event review.
- Configure MFA for privileged roles using strong authenticators such as smartcards or security keys.
- Provision Azure AD administrator roles for applicable services, including SQL.
- Enforce managed identities for applications and reduce reliance on local service keys.
- Prevent unencrypted static credentials in code and enforce secret hygiene standards.
- Author and maintain IAM policies, standards, and operating procedures.
- Conduct periodic access reviews and support audit evidence collection.
- Maintain asset and data inventories and baseline configurations aligned with configuration management.
- Configure Azure-native monitoring and logging for identity and access events.
- Route alerts to service owners and security teams and support audit readiness.
Experience Requirements:
- Advanced knowledge of Microsoft Entra ID, Azure RBAC, security groups, PIM, and JIT access workflows.
- Hands-on experience with Azure Policy, managed identities, and Azure AD admin role provisioning.
- Familiarity with Azure monitoring and logging and AAA concepts.
- Strong understanding of least-privilege design and access control best practices in Azure.
- Competence in baseline configuration management and accurate inventory maintenance.
- Experience implementing least-privilege at scale and articulating Azure RBAC rationale.
- Ability to author IAM policies and procedures, perform access reviews, and support audits.
- Proven capability governing remote and elevated access and emergency access processes.
- Effective communication and documentation skills for technical writing and stakeholder coordination.
- Ability to collaborate with engineering, security, and operations teams for compliant access practices.
- Nice-to-have: Integration with approval systems and ticketing, application identity patterns and CI/CD secret controls, and audit readiness for cloud access controls.
Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.
W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.
If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following:
· When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
· Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group.
If you have any indication of fraudulent activity, please contact fraud@eliassen.com.
-
Senior AI Security Architect – Data Security & DSPM
Anywhere
Description: Remote Our client has an excellent opportunity for a Senior AI Security Architect to own the end-to-end security architecture for the Agentic AI platform and lead the data security mandate for AI. This combined senior role unifies Agentic ...
Date Posted: 06/25/2026 Recommended
-
Senior AWS Cloud Engineer (Infrastructure/IaC)
Anywhere
Description: Remote Our client is seeking an AWS Cloud Engineer III to operate and secure an enterprise AWS environment across multiple accounts. The role will manage account lifecycle processes, provision and maintain infrastructure with Terraform, en...
Date Posted: 06/11/2026 Recommended
-
Google Cloud Platform Engineer
Washington, DC
Description: On-site in Washington, DC Our client seeks a Google Cloud Platform Engineer with hands-on experience across cloud administration, automation, integration, and application support. The role supports production GCP environments and contribut...
Date Posted: 07/01/2026 Recommended
-
Senior AWS Cloud Engineer (IaC/Networking)
Anywhere
Description: Remote Our client seeks an experienced AWS Cloud Platform Engineer to support an enterprise AWS environment managing 100+ accounts, 250+ serverless functions, and a robust infrastructure-as-code ecosystem aligned to digital transformation ...
Date Posted: 06/11/2026 Recommended
-
Software Architect III — Security & AI, Web Application Development
Greenwood Village, CO
Description: Hybrid 4 onsite / 1 work from home in Greenwood Village, CO Our client seeks a Software Architect III to design and deliver secure, scalable cloud-native web application platforms on AWS. You will own end-to-end architecture from Terraform...
Date Posted: 06/08/2026 Recommended
-
Mid Systems Engineer, PAM (CyberArk)
Washington, DC
Description: On-site in Washington, DC Step into the role of a Senior-Level CyberArk Engineer supporting our client at the Department of Transportation. You will contribute to deploying and maintaining a Privileged Access Management solution across dev...
Date Posted: 06/16/2026 Recommended
-
Microsoft Dynamics CRM Administrator/Developer
St. Louis, MO
Description: Hybrid in St. Louis, MO Our client seeks a Microsoft Dynamics CRM Administrator/Developer to lead technical implementation and serve as system administrator for selected CRM instances. The role will architect, implement, and support Micros...
Date Posted: 06/09/2026 Recommended
-
Director, Cloud Infrastructure and Engineering
Owing Mills, MD
Description: Hybrid up to three days per week from home in either Owing Mills, MD or Baltimore, MD Our client seeks a Director of Cloud Infrastructure and Engineering to lead a globally distributed team that designs, develops, and deploys cloud infrast...
Date Posted: 07/03/2026 Recommended
-
Cybersecurity Firewall Analyst
Charlotte, NC
Description: Hybrid 3 on in Charlotte, NC Our client seeks a Cybersecurity Firewall Analyst to support next-generation firewall administration, operations, and policy governance across enterprise and regulated environments. The role includes incident r...
Date Posted: 06/20/2026 Recommended
-
Senior Software Engineer - Risk Team
Los Angeles, CA
Description: Hybrid in Los Angeles, CA Our client seeks a Senior Software Engineer for the Risk Team to design and deliver scalable, secure, and resilient backend services supporting fraud detection, risk scoring, and compliance automation. The role re...
Date Posted: 06/10/2026 Recommended
-
Senior Cybersecurity Analyst
Anywhere
Description: Remote Our client seeks a Senior Cybersecurity Analyst to lead proactive defense, guide security architecture, and drive incident response and risk mitigation. The role manages and configures enterprise security tools while advancing best ...
Date Posted: 06/09/2026 Recommended
-
Lead Engineer
Los Angeles, CA
Description: Hybrid Remote to start that will eventually go hybrid in Los Angeles, CA Our client is seeking a Lead Engineer with deep expertise in .NET, C#, SQL Server, and Azure. You will lead backend-focused initiatives to build scalable, cloud-nativ...
Date Posted: 06/16/2026 Recommended
-
Platform Architect
Anywhere
Description: Remote Our client seeks a ServiceNow Platform Architect to lead architecture, governance, and strategic evolution of the enterprise ServiceNow platform. The role defines platform direction, ensures scalable and secure implementations, and ...
Date Posted: 06/15/2026 Recommended
-
Manager of the IT Service Desk
Anaheim, CA
Description: Hybrid 3 days onsite in Anaheim, CA Our client seeks a Manager of the IT Service Desk to lead end user computing, collaboration, and back office systems across branch, corporate, and remote locations. The role manages help desk operations,...
Date Posted: 06/08/2026 Recommended
-
Sr. Mobile Developer
Anywhere
Description: Remote in either Washington, DC As a Sr. Mobile Developer (Cross-Platform), you will design, build, and sustain secure iOS and Android applications to deliver mission-critical mobile capabilities for federal stakeholders. Our engineering t...
Date Posted: 06/30/2026 Recommended
-
Security Engineer - Software 3
Tysons Corner, VA
Description: Hybrid 3 days onsite / 2 days remote in either Tysons Corner, VA or Rockville, MD Our client seeks a senior application security engineer to plan, coordinate, and implement application security practices across the software development lif...
Date Posted: 06/15/2026 Recommended
-
DevOps Engineer – Database Security Monitoring
Merrimack, NH
Description: On-site every other week / 5 days in Merrimack, NH or Westlake, TX Our client is seeking a DevOps Engineer to join a cybersecurity-focused team supporting database activity monitoring across critical platforms. This role will focus on clou...
Date Posted: 06/22/2026 Recommended
-
Senior Full Stack Software Developer
Anywhere
Description: Remote Our client seeks a Senior Full Stack Software Developer with a strong DevOps background to support the Medical Document Chase application for a government healthcare program. The role is developer-first, owning design, build, test, ...
Date Posted: 06/23/2026 Recommended
-
PTP Stakeholder Support Lead – Procure-to-Pay Operations
Nashville, TN
Description: On-site 5 days/week in either Nashville, TN or New York, NY Our client seeks an executive-level PTP Stakeholder Support Lead to stabilize and elevate the internal-facing support function for global Procure-to-Pay operations during signific...
Date Posted: 06/09/2026 Recommended
-
ETL Migration Engineer
Westlake, TX
Description:Hybrid Every Other Week onsite / 5 days in Westlake, TX or Merrimack, NH As an ETL Migration Engineer, you will support our client’s Data Integration Engineering squad to migrate existing Informatica and SnapLogic workflows to a modern, clo...
Date Posted: 07/04/2026 Recommended
-
AI Engineer / AI Solutions Analyst
Anywhere
Description: Remote Our client is seeking two AI Engineers / AI Solutions Analysts to design, build, configure, and integrate agentic AI solutions across HR technology. The role blends business systems analysis, AI solution engineering, workflow design...
Date Posted: 06/24/2026 Recommended
-
Data / AI Subject Matter Expert
Anywhere
Description: Remote Our client seeks a senior Data / AI Subject Matter Expert to lead presales and consulting for converged data and AI engagements. The role will cover modern data platforms, data governance, and proactive opportunity shaping to drive ...
Date Posted: 06/08/2026 Recommended
-
Security Engineer
New York, NY
Description: Hybrid 4 days on site in New York, NY Our client is building secure and scalable infrastructure for institutional digital finance. The team focuses on security engineering, cryptography, blockchain, and research-backed engineering that bri...
Date Posted: 07/05/2026 Recommended
-
Information Security Engineer
Anywhere
Description: Remote Our client seeks an Information Security Engineer to support Enterprise Vulnerability Management Application Security operations. The role focuses on vulnerability intake, triage, and validation, including managing submissions from ...
Date Posted: 06/22/2026 Recommended
-
Senior Software Engineer in Test
Durham, NC
Description: Hybrid 2 weeks per month in either Durham, NC or Location to be confirmed Our client seeks a Senior Software Engineer in Test to design, develop, and maintain automated test suites for digital healthcare products. The role focuses on UI an...
Date Posted: 06/22/2026 Recommended
-
Vendor Management Lead
Merrimac, NH
Description: Hybrid Every other week onsite/5 days in either Merrimac, NH or Smithfield, RI or Westlake, TX Our client seeks a vendor management professional to lead a portfolio of medium-to-high complexity technology vendors with a focus on risk, perf...
Date Posted: 06/29/2026 Recommended
-
Senior Systems Engineer
Fort Meade, MD
Description: On-site in Fort Meade, MD Our client seeks a Senior Systems Engineer to support the Defense Information Systems Agency Citadel mission. The role requires advanced engineering, integration, administration, and operational support for enterp...
Date Posted: 06/18/2026 Recommended
-
Technology Solutions Architect
4100 Coca Cola Plaza
Description: Hybrid 4/1 in Charlotte, NC Our client seeks a Technology Solutions Architect to design scalable, secure, and enterprise-aligned solutions within Agile delivery teams. The role translates business requirements into implementable architectu...
Date Posted: 06/23/2026 Recommended
-
Tactical Network - Engineer
Fort Irwin, CA
Description: On-site in Fort Irwin, CA Our client seeks a Field Tactical Network Engineer to serve as a subject matter expert for Program Manager C2 Transport supporting PdM Network Modernization across At-the-Halt, On-the-Move, and SATCOM networks. Th...
Date Posted: 06/10/2026 Recommended
-
PTP Vendor Onboarding & Supplier Master Data Management Lead
Nashville, TN
Description: On-site 5 days/week in either Nashville, TN or NYC, NY Our client seeks a PTP Vendor Onboarding & Supplier Master Data Management Lead to own the end-to-end vendor lifecycle, establish governance, and drive cross-functional alignment acros...
Date Posted: 06/09/2026 Recommended
Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. Eliassen Group’s Affirmative Action Plan (AAP) is available for inspection by any employee or applicant for employment upon request, during normal business hours of Monday through Friday, 8:30am to 5:30pm EST. Interested persons should contact Phaedra Wells at pwells@eliassen.com for assistance. It is unlawful in Massachusetts and Maryland to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Applicants with disabilities that believe they require an accommodation or assistance with a position, please email our HR team at hradmin@eliassen.com. This email inbox is designed exclusively to assist job seekers whose disability prevents them from being able to apply online. Emails sent for other purposes will not receive a response.
Please be advised that a number of fraudulent job postings have been released under the Eliassen Group brand.
Unfortunately, fraudulent job postings can happen. If anyone reaches out to you about an open position connected with Eliassen Group, never provide personal or financial information to anyone who is not clearly associated with Eliassen Group
If anyone seemingly from Eliassen Group has ever requested this personal information in the past or does so in the future, please contact fraud@eliassen.com.
Please ensure that you are working directly with us by confirming the following:
- When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
- Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group, as indicated above