Identity & Access Management Engineer - Onsite - Active Secret

Job Openings >> 1802 - Identity & Access Management Engineer - Onsite - Active Secret Required

1802 - Identity & Access Management Engineer - Onsite - Active Secret Required

1802

Arlington, VA

Top Secret

Rollout Systems works with a wide spectrum of talent to establish an atmosphere that stimulates creativity, constant progress, and achievement. We believe in empowerment for success and providing the tools to do the best job for our customers. Our corporate values are transparent; being open and honest with each other.
Come and join our dynamic team!

Seeking a highly motivated and driven Identity & Access Management Engineer to work Onsite supporting enterprise IT for our War-fighter customer who upholds America's status as the "Land of the Free" every day, at work, or at play.

• Provide technical expertise supervising, monitoring, and troubleshooting Information System Identity Credential and Access Management (ICAM)
• Provide PKI engineering and integration support, administering, maintaining, and deploying various PKI systems
• Design, install, configure, and maintain PKI systems
• Subject Matter Expert (SME) in Cloud Key vaulting, Zero Trust Architecture, and modern authentication
• Perform all aspects of systems design, PKI engineering, and conversion to Cloud in support of PKI systems
• Provide in-depth subject matter expertise for engineering support related to Public Key Infrastructure (PKI) systems, especially in a government setting
• Maintain existing PKI systems – patch existing systems, deploy new components based on customer demand
• Assist in evaluating and deploying solutions to support modern authentication
• Identify security risks to customer systems and suggesting mitigations
• Identify security architecture and implementation gaps, vulnerabilities, and risks, developing, testing, and implementing solutions to address the gaps, and new or updated requirements
• Provide in-depth knowledge in conversion of PKI systems to Cloud
• Contribute to the technical direction on all areas of PKI architecture, strategies and automation and enforce governance and standards

• 6 years of experience in an enterprise LAN/MAN/WAN environment
• 4 years of experience in identity and credential management
• Demonstrated confidence and experience with ICAM skills
• Demonstrated experience and confidence with Azure Active Directory (Entra ), both on-premises and cloud
• Knowledgeable in PKI products (Security Manager, Administration Services, Security Manager Proxy)
• Hands‑on experience with Hardware Security Modules (HSMs), and external storage solutions.
• Working knowledge with a Card Management Systems (CMS) solution for Smart Cards
• Possess expert level skills in virtualization technologies (e.g., VMWare, vSphere)
• Operational experience with LDAP and PKI Directory Management
• Understanding of cloud security implementation practices, particularly PKI related. (Azure, AWS, etc.)
• Experience with Enterprise Systems Architecture, engineering, and deployment
• Working knowledge of Zero Trust Architecture and modern credential management and authentication
• Power Shell scripting experience and/or other scripting expertise
• Perform system-level design and configuration of products including determination of hardware, OS, and other platform specifications.
• Monitor and respond to complex technical control facility hardware, software, and network problems.
• Experience in network infrastructure diagnostics (TCP/IP general networking knowledge, network monitoring tools)
• Utilize software and hardware tools and identifies and diagnoses complex problems and factors affecting network performance
• Troubleshoot network systems and performance issues when necessary and make improvements to the network
• Interface with vendor support service groups to ensure proper escalation during outages or periods of degraded system performance

• CompTIA Security+ CE
• DoD Manual 8140.03 (451) System Administrator OR (441) Network Operations Specialist (Intermediate)

• Active Secret Security Clearance

• BS or BA degree in Computer Science, Engineering or an Information…