IAM Architect

Responsibilities

• Design IAM solutions to support PIV/Certificate Base Authentication and FIDO 2
• Facilitate IAM integration into business applications using SAML, OAuth, and OpenID Connect
• Collaborate with customers to define organization constructs and user access roles
• Provide guidance on user lifecycle management and privilege access management
• Define and support Azure Entra ID and Certificate Lifecycle Management
• Identify opportunities for automated onboarding and offboarding solutions

Requirements

• Ability to obtain Department of Homeland Security (DHS) Entry On Duty (EOD)
• BA/BS with 10+ years of applicable experience or AA with 15+ years
• Expert knowledge of authentication protocols including SAML, OAuth, OpenID, WSO2, and Kerberos
• Strong scripting and automation abilities using PowerShell
• Experience with Microsoft Azure PIM, Access Reviews, and ABAC
• Strong knowledge of enterprise PKI integration with SCEP and ACME clients
• Experience creating technical architecture documentation

Preferred Qualifications

• ITILv3 or v4 Foundation certification
• Previous DHS or DoD experience
• Microsoft Azure Fundamentals certification
• CompTIA A+, Network+, or Security+ certification

About the Company

CACI is a mission-driven organization focused on providing technical leadership and innovation to support national security and government missions.