Identity Engineer (USSOCOM-Zero Trust)

Overview Kentro is hiring for Senior Identity Engineer to support the Zero Trust modernization initiative under the EDAT contract for United States Special Operations Command . The selected candidate will lead the design, integration, implementation, and sustainment of enterprise Identity, Credential, and Access Management (ICAM) solutions aligned with DoD Zero Trust Architecture requirements. The Senior Identity Engineer serves as a technical leader responsible for designing, implementing, integrating, and sustaining enterprise Identity, Credential, and Access Management (ICAM) solutions supporting the USSOCOM Enterprise Zero Trust Architecture. This role is responsible for modernizing identity services, implementing identity governance, privileged access management, and authentication technologies while ensuring compliance with DoD Zero Trust guidance, cybersecurity policies, and mission requirements. Location: Hybrid in Tampa, FL Responsibilities Design, implement, and maintain enterprise Identity and Access Management (IAM) solutions supporting Zero Trust initiatives. Engineer secure authentication and authorization services utilizing modern identity standards including SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, and PKI. Design and implement Identity Governance and Administration (IGA) capabilities including automated provisioning, lifecycle management, and role-based access control (RBAC). Implement and maintain Privileged Access Management (PAM) solutions to secure privileged identities and administrative accounts. Integrate enterprise applications with centralized authentication platforms and federation services. Support implementation of Continuous Authentication and Conditional Access capabilities aligned with Zero Trust principles. Develop identity automation using scripting languages such as PowerShell, Python, or REST APIs. Perform identity architecture reviews and recommend improvements to authentication, authorization, and identity lifecycle processes. Develop and maintain identity-related documentation including architecture diagrams, implementation guides, SOPs, and security documentation. Troubleshoot complex authentication, federation, directory services, and identity synchronization issues. Collaborate with cybersecurity teams to support Risk Management Framework (RMF), STIG implementation, vulnerability remediation, and audit readiness. Provide technical leadership and mentoring to junior engineers and support personnel. Participate in architecture reviews, design sessions, and technical planning activities supporting enterprise modernization efforts. Ensure identity services comply with DoD, DISA, NIST 800-53, NIST SP 800-207, and USSOCOM cybersecurity requirements. Qualifications Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related field (or equivalent experience). Minimum of 10 years of experience in Identity and Access Management, Identity Engineering, or Enterprise Security Engineering. Minimum of 5 years supporting DoD or Federal enterprise cybersecurity environments. Technical Skills: Experience implementing or administering Identity Governance (IGA) platforms. Experience implementing or administering Privileged Access Management (PAM) solutions. Experience integrating enterprise applications using SAML, OAuth 2.0, OIDC, and SCIM. Experience automating identity management through PowerShell, Python, REST APIs, or similar scripting languages. Experience supporting cloud identity services across Microsoft Azure and hybrid enterprise environments. Strong understanding of Zero Trust Architecture principles. Experience supporting RMF, STIG compliance, vulnerability remediation, and cybersecurity audits. Excellent written and verbal communication skills. DoD 8570/8140 IAT Level II or IAM Level II compliant certification required. Preferred Qualifications Experience supporting USSOCOM, DoD, or Intelligence Community environments. Experience with SailPoint, Saviynt, or similar Identity Governance platforms. Experience with CyberArk, BeyondTrust, Delinea, or comparable Privileged Access Management solutions. Experience with Microsoft Entra ID Identity Protection and Conditional Access. Experience supporting enterprise cloud migrations. Familiarity with DevSecOps and Infrastructure as Code (IaC) methodologies. Experience implementing Zero Trust maturity initiatives aligned with DoD guidance. Clearance Requirement Active TS/SCI security clearance Must be a US Citizen Benefits We offer competitive benefits package including paid time off, healthcare benefits, supplemental benefits, 401k including an employer match, discount perks, rewards, and more. We invest in our employees – Every employee is eligible for education reimbursement for certifications, degrees, or professional development. Reimbursement amounts may fluctuate due to IRS limitations. We want you to grow as an expert and a leader and offer flexibility for you to take a course, complete a certification, or other professional growth and networking. We are committed to supporting your curiosity and sustaining a culture that prioritizes commitment to continuous professional development. Commitment Equal Opportunity Employment & VEVRAA Kentro is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state or local law. Kentro is strongly committed to compliance with VEVRAA and other applicable federal, state, and local laws governing equal employment opportunity. We have developed comprehensive policies and procedures to ensure our hiring practices align with these requirements. As part of our VEVRAA compliance efforts, Kentro has established an equal opportunity plan outlining our commitment to recruiting, hiring, and advancing protected veterans. This plan is regularly reviewed and updated to ensure its effectiveness. We encourage protected veterans to self-identify during the application process. This information is strictly confidential and will only be used for reporting and compliance purposes as required by law. Providing this information is voluntary and will not impact your employment eligibility. Our commitment to equal employment opportunity extends beyond legal compliance. We are dedicated to fostering an inclusive workplace where all employees, including protected veterans, are treated with dignity, respect, and fairness. #J-18808-Ljbffr kentro