Master Entitlement Record Engineer (Radiant Logic)

Job Description

Job Description

Position Overview

The Master Entitlement Record Engineer specializes in designing, deploying, and maintaining Master Entitlement Records (MER) and authoritative identity pipelines using the Radiant Logic RadiantOne Virtual Directory Server (VDS) / FID platform. This role is responsible for virtualizing, unifying, and correlating disparate identity, group, and access entitlement data across heterogeneous enterprise data stores, directories, databases, and cloud environments. The engineer ensures the creation of a centralized, real-time "single source of identity truth" (Master Entitlement Record) to support fine-grained access control, Attribute-Based Access Control (ABAC), Identity Governance and Administration (IGA), and Zero Trust Architecture (ZTA) initiatives.

Key Responsibilities

· Design, build, configure, and maintain Radiant Logic RadiantOne FID/VDS instances across complex hybrid environments (on-premises and cloud).

· Develop, manage, and optimize unified identity views, object mapping, schema extensions, and entitlement aggregation models to support downstream authorization and governance engines.

· Connect, join, translate, and synthesize identity data from disparate sources including Active Directory, Microsoft Entra ID, LDAP directories, relational databases (SQL, Oracle), web services/APIs, and flat files.

· Write and maintain advanced mapping, join logic, cascading rules, computed attributes, and real-time synchronization pipelines using Radiant Logic native tools and custom scripting.

· Implement dynamic context and attribute feeds to power Policy Decision Points (PDP) and Policy Enforcement Points (PEP) across the enterprise identity mesh.

· Perform load balancing, context caching, indexing optimization, cluster synchronization, and performance tuning for Radiant Logic clusters to maintain low-latency response times for high-volume authentication/authorization queries.

· Manage platform upgrades, version migrations, cluster health checks, backup/disaster recovery procedures, and security hardings (STIG compliance).

· Serve as the senior technical escalation point for data synchronization failures, identity resolution edge cases, schema inconsistencies, and directory performance degradation.

Required Qualifications

· Bachelor’s Degree in Cybersecurity, Computer Science, Information Technology, Systems Engineering, or a related technical discipline.

· Minimum of six (6) years of professional experience in Identity, Credential, and Access Management (ICAM), with at least three (3) years dedicated to hands-on engineering and administration of Radiant Logic RadiantOne (FID/VDS) platforms.

· Must possess an active government security clearance (Secret required).

· Active IAT Level II Baseline Certification in accordance with DoD 8570.01-M / DoD 8140 (e.g., CompTIA Security+ CE, CySA+, GSEC, CCNA Security, or higher level certifications like CISSP or CASP+) or the ability to obtain within 30 days.

Technical Expertise:

· Deep understanding of directory technologies, schema structures, and protocols: LDAP, Active Directory, Azure AD/Entra ID, SAML, OAuth, OIDC, and REST/SOAP web services.

· Practical experience designing complex joins, user unions, auto-generated attributes, and complex hierarchy transformations in Radiant Logic.

· Solid working knowledge of relational database structures and query languages (SQL Server, Oracle, PostgreSQL).

· Familiarity with scripting languages (PowerShell, Bash, Python) for operational automation and data validation.

· Exceptional analytical problem-solving skills, precision in data modeling, and the ability to articulate identity infrastructure concepts to both technical leads and program managers.

· Direct experience supporting Federal ICAM (FICAM), DoD ICAM, or enterprise Zero Trust Architecture (ZTA) implementations.

· Integration experience connecting Radiant Logic to IGA platforms (e.g., SailPoint), Access Managers (e.g., Ping, Okta, ForgeRock), or PAM solutions (e.g., CyberArk).