IAM Engineer

IAM Engineer

Balanced hands-on role supporting and engineering enterprise IAM capabilities in a DoD environment. Responsible for secure identity lifecycle, access control, and compliance with ICAM, Zero Trust requirements.

Key Responsibilities

• Administer and engineer identity lifecycle (JML), RBAC, and access certifications.
• Implement and support SSO/federation and MFA (SAML, OAuth/OIDC, CAC/PIV).
• Deploy and operate PAM controls (vaulting, JIT access, session monitoring).
• Integrate IAM platforms with directories and applications; troubleshoot access.

Required Qualifications

• 2+ years of experience in Identity and Access Management (IAM), specializing in administration and engineering with one or more technologies such as SailPoint, Saviynt, Microsoft Entra ID (formerly Azure AD), Active Directory/ADFS, Okta, Ping Identity, ForgeRock, CyberArk, BeyondTrust, Radiant Logic, and LDAP/Active Directory.
• Hands-on experience with IGA, PAM, Access Management, directories, and MFA.
• Strong knowledge of ICAM and Zero Trust principles.
• Experience with identity protocols (SAML, OAuth2/OIDC, LDAP).

Preferred Qualifications

• Certifications: CISSP, Security+, CIAM, or vendor certs (Microsoft, SailPoint, CyberArk).
• Scripting/automation (PowerShell/Python); cloud IAM experience.