IAM Software Engineer

Peraton is seeking an Identity Platform Integration Engineer to support the Department of Defense's next-generation enterprise Identity, Credential, and Access Management (ICAM) platform that is replacing DS Logon and providing secure authentication services for millions of Service Members, Veterans, Family Members, and Beneficiaries. The Alternative Multi-factor Authentication Support Services (AMASS) Program provides secure, scalable identity and access management services across the Department of Defense, enabling authentication, authorization, and digital identity interoperability for high visibility DoD systems.In this role you will specialize in identity integration, secure authentication services, and API development, not general-purpose backend application development. The ideal candidate has hands-on experience with modern IAM/ICAM standards, secure API design, enterprise identity services, and missioncritical service integration within Federal environments.This is a 100% remote role.ResponsibilitiesDesign, develop, and integrate RESTful APIs supporting identity workflows and partner application authentication.Implement OAuth 2.0, OpenID Connect (OIDC), PKCE, and secure token management patterns.Build secure API authentication and authorization services using JWT, access tokens, and refresh tokens.Integrate backend services with the Okta Identity Engine (OIE), Okta Embedded SDK, and DoD enterprise IAM solutions.Implement identity service integrations with authoritative identity repositories and enterprise data sources.Develop secure backend web services using Java, Spring Boot, .NET, or equivalent technologies.Support API gateway configurations, microservices architecture, and service orchestration patterns.Implement JSON/XML data exchange models and develop API contracts supporting partner application consumption.Apply enterprise integration patterns and asynchronous messaging (queues, events, service buses).Design authentication workflow orchestration and session management services.Develop backend services supporting mobile authentication for native iOS and Android applications.Apply advanced API security practices, including OWASP API Security Top 10, mTLS, and certificate-based authentication.Implement secure database integration and data access patterns.Develop reusable identity services supporting multiple Partner Applications.Implement API Gateway integrations.Implement enterprise audit logging and operational telemetry.Contribute to CI/CD pipelines, automated builds, and DevSecOps processes.Perform unit, integration, and API testing using tools such as Postman, Swagger/OpenAPI, or equivalent.Participate in Agile development, Git-based version control, and secure configuration management.Integrate enterprise ICAM/CIAM platforms in cloud or hybrid environments.Ensure identity solutions comply with NIST SP 800-63 Digital Identity Guidelines and Zero Trust Architecture principles.Support DoD cybersecurity requirements, including RMF and STIG compliance.QualificationsRequired Qualifications5 years with BS/BA; 3 years with MS/MA; 0 years with Ph, 9 yeas with HS diplomaMust be able to obtain and maintain a Public TrustU.S. Citizenship requiredExperience designing, developing, and integrating RESTful APIs.Strong knowledge of OAuth 2.0, OpenID Connect (OIDC), PKCE, and token management.Experience implementing secure API authentication and authorization (JWT, access and refresh tokens).Experience integrating with the Okta Identity Engine (OIE) and enterprise IAM services.Experience integrating identity services with authoritative identity repositories.Background in secure backend development using Java, Spring Boot, .NET, or similar frameworks.Experience with API gateways, microservices, and backend orchestration.Proficiency with JSON/XML and API contract development.Experience implementing enterprise integration patterns and asynchronous messaging.Understanding of authentication workflow orchestration and session management.Experience building backend services supporting native mobile authentication.Knowledge of API security best practices, OWASP API Security Top 10, mTLS, and certificate authentication.Experience with databases and secure data access patterns.Experience in CI/CD pipelines and DevSecOps environments.Hands-on experience with unit, integration, and API testing tools (Postman, Swagger/OpenAPI).Experience supporting enterprise ICAM/CIAM solutions in cloud or hybrid architectures.Knowledge of NIST SP 80063 and Zero Trust Architecture.Experience supporting RMF and STIG cybersecurity compliance.Preferred QualificationsExperience integrating backend services with Okta Identity Engine Embedded SDK.Experience supporting large-scale Federal ICAM/CIAM programs.Knowledge of DoD identity services, CAC/PIV, derived credentials, or enterprise credentialing.Experience with event-driven architectures or highsecurity distributed systems.Familiarity with DoD Zero Trust initiatives and identity modernization.Peraton OverviewPeraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.Target Salary Range$66,000 - $106,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.EEOEEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.Helping all candidates find great careers is our goal. The information you provide here is secure and confidential.J-18808-Ljbffr