Identity Management Engineer/Architect (R-00197)

Responsibilities

• Design, implement, and operate enterprise IAM / ICAM architectures supporting on-premises, cloud, SaaS, and hybrid environments
• Engineer and maintain directory services including Active Directory and Microsoft Entra ID
• Design and automate user provisioning, deprovisioning, and identity lifecycle management processes
• Integrate enterprise applications using SAML, OpenID Connect (OIDC), OAuth, and SCIM
• Implement and maintain Privileged Access Management (PAM) controls
• Design and operate Identity Governance and Administration (IGA) capabilities using SailPoint or approved platforms
• Integrate and administer AWS IAM Identity Center
• Implement PIV/CAC smart-card authentication and phishing-resistant MFA
• Align identity architectures with FICAM requirements and government identity standards
• Automate identity management processes using scripting, APIs, and infrastructure-as-code
• Implement monitoring, logging, auditing, and alerting for authentication events

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, IT, or a related technical discipline
• Demonstrated experience designing or administering enterprise IAM / ICAM solutions
• Strong experience with Active Directory and Microsoft Entra ID
• Hands-on experience with SAML, OIDC, OAuth, and SCIM standards
• Experience with Privileged Access Management (PAM) platforms
• Experience with Identity Governance and Administration (IGA), preferably SailPoint
• Experience with AWS IAM and cloud identity integration
• Understanding of Zero Trust architecture and identity as a policy pillar
• Proficiency in automating workflows using PowerShell, Python, Terraform, or APIs
• Experience implementing PIV/CAC or certificate-based authentication

Preferred Qualifications

• Experience supporting government, defense, or GovCloud environments
• AWS Certified Security – Specialty certification
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• CISSP certification
• SailPoint IdentityIQ / Identity Security Cloud certification
• CyberArk Defender or CyberArk Sentry certification

Benefits

• Competitive salary paid twice per month
• 100% of medical premiums covered by True Zero
• 401k Program with 100% company match on the first 4%
• 3 weeks of PTO plus 11 Paid Holidays annually
• Monthly reimbursement for Cell Phone and Home Internet costs
• Paternity/Maternity Leave
• Investment in training and certifications