IAM Engineer

SpaceXSI•Washington, DC

1d•$100,000 - $198,000

About The Position

SpaceXSI is seeking an Identity and Access Management (IAM) Engineer to design, implement, and mature its enterprise IAM ecosystem. The role serves as a subject matter expert within the Information Security organization and drives secure, scalable, user-friendly identity solutions in a fast-paced, high-growth environment. The engineer owns complex IAM initiatives end to end, from strategy and architecture through implementation and optimization, in collaboration with Security, Infrastructure, Application, and Engineering teams. This hands-on, high-visibility position calls for someone comfortable with ambiguity, collaborative, and accountable for outcomes. The position focuses on enterprise IAM across on-premises, cloud, and SaaS environments; federation and identity lifecycle capabilities; IAM platform integration; automation; cloud IAM; and security and compliance needs. The engineer also participates in an on-call rotation and identity-related incident response.

Requirements

At least 3 years of hands-on experience in Identity and Access Management (IAM).

Nice To Haves

Thorough understanding of IAM principles and modern security concepts, including Zero Trust, Least Privilege, Adaptive/Risk-Based Authentication, Attribute-Based Access Control (ABAC), Continuous Access Evaluation, and Identity Threat Detection and Response (ITDR).
Strong expertise in IAM protocols and standards, including SAML, OIDC, OAuth 2.0, SCIM, and other federation protocols.
Proven experience architecting and implementing end-to-end federation solutions.
Hands-on experience with major IAM platforms, particularly SailPoint, Okta, PingOne, and Microsoft identity solutions.
Strong working knowledge of AWS and GCP, cloud IAM services, Terraform, and CI/CD practices.
Strong scripting and programming skills in Python and JavaScript/TypeScript, with extensive experience developing IAM workflows, automation, and integrations.
Demonstrated ability to lead technical initiatives and drive projects from design through implementation.

Responsibilities

Design and implement enterprise-grade IAM solutions across on-premises, cloud, and SaaS environments.
Architect and deliver end-to-end federation strategies using protocols such as SAML, OIDC, OAuth 2.0, and SCIM.
Lead integration and optimization of IAM platforms, including SailPoint, Okta, PingOne, and Microsoft Entra ID.
Drive Identity Lifecycle Management (LCM), Role-Based Access Control (RBAC), Privileged Access Management (PAM), and Just-In-Time access initiatives.
Develop automation scripts and Infrastructure as Code using Terraform to improve provisioning, governance, and operational efficiency.
Serve as the primary IAM subject matter expert, providing technical guidance, troubleshooting complex issues, and mentoring team members.
Collaborate with InfoSec, Compliance, and Engineering teams to meet audit, regulatory, and security requirements.
Continuously improve IAM architecture, processes, and capabilities.
Support cloud IAM strategies across AWS, GCP, and other platforms.
Participate in an on-call rotation and incident response related to identity systems.