Identity and Access Management; IAM Manager

The Identity and Access Management (IAM) Manager is a hands‑on technical leader responsible for the design, implementation, and continuous improvement of Clark’s identity ecosystem. This role balances high‑level strategy with deep technical execution, serving as the lead architect and engineer for the Saviynt, Entra , and Okta platforms. You will not only manage the roadmap and stakeholders, but will also remain involved in the technical details—writing scripts, configuring complex SSO integrations, and building the automation frameworks that secure our enterprise.

This is a full‑time onsite position based in our McLean, VA office.

• Architectural Oversight:
  Lead the technical design of IAM solutions from discovery through long‑term support, ensuring all systems meet “Least Privilege” and Zero Trust standards.
• Lead Engineering:
  Act as the Tier3 technical expert for the Saviynt IGA platform, personally overseeing the onboarding of complex applications and the development of custom connectors.
• Advanced Automation:
  Directly develop and maintain scripts (Power Shell, Python) and SQL queries to automate user provisioning, de‑provisioning, and complex lifecycle workflows.
• Modern Auth Implementation:
  Hands‑on configuration of federation protocols including SAML, OAuth, and OIDC, and managing the migration of legacy authentication to modern standards.
• Governance & Audit Lead:
  Partner with Internal Audit to automate access certifications and provide technical evidence for compliance requirements across all enterprise systems.
• Platform Health:
  Take ultimate accountability for the stability of SSO platforms, participating in bimonthly maintenance and troubleshooting the most critical technical escalations.

• Roadmap Execution:
  Drive the planning and technical execution of IAM technology enhancements and long‑term security roadmaps.
• Mentorship &
  
  Coaching:
  
  Coach and upskill team members on IAM best practices, peer‑reviewing technical changes to ensure alignment with Clark standards.
• Standardization:
  Create and enforce engineering standards for documentation, IAM procedures, and infrastructure‑as‑code.
• Cross‑Functional
  
  Collaboration:
  
  Engage with Business Application Owners and SMEs to translate business requirements into technical IAM specifications.

• 8+ years of dedicated, hands‑on IAM experience.
• 3+ years of demonstrated experience leading technical teams, including direct people management (hiring, performance reviews, and career development) and serving as a technical mentor for junior engineers in high‑pressure environments.
• Expert‑level proficiency in APIs, SCIM, SAML, and OIDC.
• Advanced experience with SQL and scripting (Power Shell/Python) for identity automation.
• Deep administrative experience in Saviynt (or SailPoint), Entra , and Okta.
• Proven ability to collaborate across business units, engage with stakeholders, and drive results while remaining adaptable and accountable.
• Ability to work in the office 5 days a week and participate in bimonthly maintenance windows as required.

• Experience integrating IAM platforms with Service Now for ticketing automation and Cyber Ark for privileged access.
• Ability to develop advanced reporting and telemetry for IT and Business stakeholders.

Clark Construction Group, LLC (and its subsidiaries and affiliates) is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, age, national origin, religion, physical and mental disability, genetic information, marital status, sexual orientation, gender identity, citizenship, pregnancy or maternity, protected veteran status, or any other status prohibited by applicable national, federal, state or local law.

Clark promotes a drug‑free workplace.

Applicants have rights under Federal Employment Laws:
Family and Medical Leave Act (FMLA), Equal Employment Opportunity (EEO), and Employee Polygraph Protection Act (EPPA). Clark is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please email leaveof or call (800)655‑1330 and let us know the nature of your request and your contact information.

Authorization to Work:
Applicants must be currently authorized to work in the US on a full‑time basis in order to be considered.