AWS IAM)

Kforce•New York, NY

32d•Hybrid

About The Position

Kforce is working with a client in search of a Hybrid Identity Lead Engineer in New York, NY. The role offers tremendous flexibility (once a week onsite or 4 days a week to fulfill the monthly requirement). The firm is offering a tremendous benefits package including top notch 403B plan, lots of time off, tuition reimbursement, superb medical benefits, etc. Summary: In this role, the experienced Hybrid Identity Lead Engineer with deep expertise in designing and managing secure, scalable identity and access solutions across hybrid environments. Skilled in integrating and administering Active Directory, Microsoft Entra ID (Azure AD), AWS IAM, and GCP IAM to support modern Zero Trust architectures Proven track record of leading enterprise IAM strategies, implementing identity lifecycle automation, enforcing the least privilege, and aligning access controls with security and compliance requirements in cloud and on-premises infrastructures.

Requirements

Typically requires 7 or more years of experience and BA/BS degree
Microsoft Certified: Identity and Access Administrator Associate
AWS Certified Security Specialty
GCP Cloud Security Engineer

Nice To Haves

Experience with Privileged Access Management (PAM) tools (e.g., CyberArk, BeyondTrust)
Familiarity with Terraform, CloudFormation, or similar infrastructure-as-code tools for identity resource management
Preferred experience with Identity Governance and Administration (IGA) solutions such as SailPoint

Responsibilities

Manage and maintain a unified IAM architecture by integrating Active Directory (AD), Entra ID (Azure AD), and AWS IAM to ensure consistent, secure identity and access controls across on-premises and cloud platforms
Build and maintain a centralized identity framework connecting AD, Entra ID, and AWS IAM and GCP to protect sensitive healthcare data and streamline secure access across cloud and on-prem systems
Define and enforce enterprise identity standards, including naming conventions, group structures, RBAC policies, and lifecycle automation
Lead the adoption of Zero Trust principles and modern identity-centric security models by implementing secure IAM frameworks in AWS and GCP including roles, policies, SCPs, and federation while supporting vulnerability management efforts through alignment of access controls with cloud security findings