IAM Engineer

IAM Engineer

Balanced hands-on role supporting and engineering enterprise IAM capabilities in a DoD environment. Responsible for secure identity lifecycle, access control, and compliance with ICAM, Zero Trust requirements.

Key Responsibilities

• Administer and engineer identity lifecycle (JML), RBAC, and access certifications.
• Implement and support SSO/federation and MFA (SAML, OAuth/OIDC, CAC/PIV).
• Deploy and operate PAM controls (vaulting, JIT access, session monitoring).
• Integrate IAM platforms with directories and applications; troubleshoot access.

Required Qualifications

• 2+ years of experience in Identity and Access Management (IAM), specializing in administration and engineering with one or more technologies such as SailPoint, Saviynt, Microsoft Entra  (formerly Azure AD), Active Directory/ADFS, Okta, Ping Identity, Forge Rock, Cyber Ark, Beyond Trust, Radiant Logic, and LDAP/Active Directory.
• Hands-on experience with IGA, PAM, Access Management, directories, and MFA.
• Strong knowledge of ICAM and Zero Trust principles.
• Experience with identity protocols (SAML, OAuth2/OIDC, LDAP).

Preferred Qualifications

• Certifications:
  
  CISSP, Security+, CIAM, or vendor certs (Microsoft, SailPoint, Cyber Ark).
• Scripting/automation (Power Shell/Python); cloud IAM experience.