Identity and Access Management Engineer

Job Description

Job Description

We are looking for an Identity and Access Management Engineer to support secure access solutions for enterprise applications in Silver Spring, Maryland. This role focuses on designing and maintaining federation services, strengthening identity governance practices, and improving the reliability of authentication and authorization processes. The ideal candidate will bring strong technical expertise in IAM architecture and a practical approach to resolving access, policy, and integration challenges.

Responsibilities:
• Architect and support identity federation integrations for enterprise platforms using modern authentication and authorization standards such as OAuth 2.0 and OpenID Connect.
• Establish and maintain trust relationships and secure sign-on configurations to ensure dependable access across connected applications.
• Create clear onboarding frameworks and technical documentation to streamline the integration of new business systems into the identity environment.
• Investigate and resolve complex authentication issues involving tokens, claims, and federated access flows.
• Drive improvements to joiner, mover, and leaver processes so that account provisioning and deprovisioning remain accurate and timely.
• Enhance access models and contribute to role engineering efforts that align user permissions with business responsibilities.
• Support access review activities by helping coordinate certification campaigns and tracking remediation work through completion.
• Reinforce segregation of duties controls and apply policy standards that reduce risk and strengthen governance.
• Collaborate with infrastructure and engineering teams on directory services, Group Policy Objects, virtualization, storage, and DevOps-related IAM dependencies.• Proven experience designing and supporting identity and access management solutions in complex enterprise environments.
• Strong knowledge of federation concepts and hands-on experience with OAuth 2.0, OpenID Connect, claims, and token-based authentication.
• Ability to develop process documentation and integration standards for onboarding enterprise applications.
• Experience improving identity lifecycle workflows, including user onboarding, role changes, and offboarding activities.
• Familiarity with access governance practices such as certification reviews, remediation tracking, and segregation of duties enforcement.
• Working knowledge of Active Directory-related technologies, including Group Policy Objects and enterprise access architecture.
• Understanding of supporting infrastructure domains such as server virtualization, enterprise storage, DevOps practices, and architecture standards.