Identity and Access Management Engineer

Identity and Access Management Engineer

As an Identity and Access Management (IAM) Engineer at Booz Allen, you will support large-scale IAM projects for government clients, analyze the identity lifecycle, articulate access requirements, and define enterprise identity records. You will design, deploy, and support systems that verify appropriate user privileges and manage credentials for accessing our clients’ most valuable assets, including single sign-on and privileged access solutions.

• Support ICAM, security operations, security architecture, and threat response.
• Administer directory services, including LDAP-compliant directories such as Active Directory.
• Administer cybersecurity functions and implement PKI and PIV standards.
• Work collaboratively in cross-functional teams across diverse environments.
• Architect, deploy, configure, and maintain Identity Management platforms such as Active Directory, Ping Identity, or SailPoint.
• Analyze identity lifecycle and develop specifications for enterprise identity records.
• Design and implement enterprise-class solutions for user authentication and privileged access.

• HS diploma or GED.
• Secret clearance (or eligibility for Secret).
• Experience supporting ICAM, security operations, security architecture, and threat response.
• Experience with the administration of directory services, including LDAP and Active Directory.
• Experience with cybersecurity administration and implementing PKI and PIV standards.
• Experience working with cross-functional teams.
• Knowledge of cybersecurity fundamentals in the IDM domain.
• Ability to architect, deploy, configure, and maintain IAM platforms such as Active Directory, Ping Identity, or SailPoint.

• Project management experience, including schedule management and complex problem resolution.
• Consultative project management in an IT environment.
• Experience with COTS IAM tools (Microsoft Identity Manager, SailPoint, Saviynt, One Identity).
• Experience with SIEM tools (Splunk or ELK stack).
• Experience with troubleshooting processes and standards for IGA or PAM.
• Bachelor’s degree in a related field.
• Experience supporting enterprise IAM solution delivery projects.

Applicants selected will be required to undergo a security investigation and may need to meet eligibility requirements for access to classified information; a Secret clearance is required.

Salary range: $61,900 to $141,000 (annualized USD). Booz Allen provides health, life, disability, financial, and retirement benefits, paid leave, professional development, tuition assistance, work-life programs, and dependent care. Full-time and part-time employees working at least 20 hours a week are eligible to participate in Booz Allen’s benefit programs.

All qualified applicants will receive consideration for employment without regard to disability, veteran status, or any other status protected by applicable law.

As part of the hiring process, a biometric identity verification will be conducted. Candidates will be expected to be on camera during interviews and assessments; we reserve the right to take a photograph to verify identity.

AI tools may be used at work, but use of AI or other tools to assist with candidate responses during interviews is prohibited unless explicit permission is provided.

• Remote: occasional in-person work at a Booz Allen or customer facility may be required.
• Hybrid: frequent work from a Booz Allen facility; may also visit a customer facility.
• Onsite: primarily performed at a Booz Allen office or customer facility.