PKI IAM Security Engineer

Designing and implementing identity and access management solutions, the remote PKI IAM Security Engineer will operate public key infrastructure capabilities and ensure compliance with federal security requirements for a large federal enterprise cloud platform. Key responsibilities: Engineering and operating identity, credential, and access management (ICAM) services, including authentication and single sign-on for platform applications Implementing and maintaining public key infrastructure (PKI), including certificate lifecycle management and PIV card-based authentication Configuring and managing cloud identity and access management (AWS IAM) while applying federal identity standards and advancing zero-trust principles Required qualifications: Bachelor's degree and 3+ years of relevant experience; experience may substitute for education Hands-on experience with identity and access management (IAM) and/or public key infrastructure (PKI) in an enterprise or cloud environment Working knowledge of authentication and authorization protocols (e.g., SAML, OAuth 2.0, OIDC, LDAP) Familiarity with federal identity standards such as PIV/HSPD-12 and NIST SP 800-63 Ability to obtain and maintain a U.S. Public Trust/suitability determination