IAM Engineer

Role overview Engineer and maintain identity and access management services for a government customer, with a focus on enterprise identity lifecycle, authentication, and privileged access. You’ll implement solutions designed by IAM architects and work with cloud, network, and security teams to integrate access controls into business applications and external services. The role also supports process automation and secure authentication methods, including government smart cards and passwordless options.

Responsibilities - Build and maintain enterprise access management capabilities, including authentication with PIV or certificates and FIDO. - Integrate applications and third parties with single sign-on using protocols such as SAML, OAuth, and OpenID Connect. - Help define user roles, organizational structures, naming conventions, and workflows for onboarding, lifecycle management, and privileged access. - Support Azure Entra ID, privileged access management, and enterprise PKI integration. - Advise stakeholders on IAM practices; coordinate with cloud, network, security, and vendor teams to assess and deploy solutions. - Identify opportunities to automate access processes with scripting and document technical architectures.

Requirements - Ability to obtain Department of Homeland Security Entry on Duty status; active status is preferred. - Bachelor’s degree plus 8 years of applicable experience, or associate degree plus 10 years. - Experience with identity management tools and government smart card authentication under HSPD-12. - Strong knowledge of SAML, OAuth, OpenID, WSO2, and Kerberos authentication. - Experience delivering cloud role-based access control, including Azure, and scripting automation such as PowerShell. - Knowledge of Azure PIM, access reviews, service principals, managed identities, ABAC, and enterprise PKI integration using SCEP and ACME clients.

Nice to have - ITIL Foundation certification, Azure Fundamentals, or CompTIA A+, Network+, or Security+. - Prior DHS or DoD experience and background with Azure cloud automation.

Benefits and work setup - Full-time role with no listed travel requirement. - Benefits include healthcare, wellness, retirement, family support, continuing education, and time off.