IAM Engineer

CACI International

1d•$98,500 - $206,800

About The Position

CACI is seeking an experienced SailPoint IAM Engineer to operate and maintain the Identity IQ platform for a government customer. The IAM Engineer provides technical guidance to the program manager and stakeholders on enterprise-scale projects and solutions, and implements solutions designed by the IAM architect to meet organizational needs and standards. The role helps define, develop, and implement IAM solutions that reduce risk, enhance resiliency, and support business initiatives. It works with Microsoft Azure, network, and security architecture professionals to integrate and operate IAM services, and coordinates with vendors to evaluate, test, and deploy technology solutions as needed.

Requirements

Ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD); active EOD preferred.
Bachelor’s degree and 8 years of applicable experience, or associate degree and 10 years of applicable experience.
Experience in the identity field, with a background in identity management tools.
Strong knowledge of HSPD-12 and implementation of government smart card authentication.
Expert knowledge of authentication with SAML, OAuth, OpenID, WSO2, and Kerberos.
Prior experience providing role-based access control (RBAC) solutions for cloud solutions such as Azure.
Strong scripting and automation abilities, including PowerShell.
Understanding of Microsoft Azure PIM, Access Reviews, Service Principals, Managed Identities, and ABAC.
Strong knowledge of enterprise PKI integration with SCEP and ACME clients.
Experience creating technical architecture documentation.
Strong communication and written skills.

Nice To Haves

ITIL v3 or v4 Foundation certification.
Previous DHS or DoD experience.
Microsoft Azure Fundamentals certification.
CompTIA A+, Network+, or Security+ certification.
Experience with Azure Cloud, scripting, and automation.
Active DHS EOD.

Responsibilities

Implement IAM solutions supporting PIV/certificate-based authentication and FIDO.
Engineer and maintain a secure, robust enterprise access management solution.
Integrate IAM with business applications and third parties, including enabling single sign-on using SAML, OAuth, and OpenID Connect.
Collaborate with customers to define organizational constructs, naming conventions, and user access roles.
Assist in developing processes and workflows for IAM operations, including user onboarding, lifecycle management, and privileged access management.
Assist with integration of an enterprise PKI solution.
Advise business stakeholders on Identity and Access Management best practices.
Define, improve, and support Azure Entra ID and Privileged Access Management within the organization.
Identify opportunities to automate solutions such as onboarding and offboarding, and mature existing processes through scripting.
Provide technical guidance to the program manager and key stakeholders on enterprise-scale IAM projects and solutions.
Work with Microsoft Azure, network, and security architecture professionals to integrate and operate IAM services.
Coordinate with vendors to evaluate, test, and deploy new technology solutions.