IDAM Engineer

ECS Tech Inc•Washington, DC

27d•$165,000 - $190,000•Onsite

About The Position

ECS is seeking an IDAM Engineer to work in our Washington, DC office. ECS is seeking a highly skilled IDAM Engineer with strong Active Directory and identity management expertise to support a high‑visibility federal program in Washington, DC. This role is ideal for an engineer who thrives in fast‑paced environments, enjoys solving complex identity challenges, and wants to work with a team that values technical excellence and innovation.

Requirements

Active DoD Top Secret clearance with SCI eligibility and ability to obtain/maintain a CI polygraph.
Minimum 5 years of technical experience in enterprise IT environments.
Strong PowerShell scripting experience.
Knowledge of: ADFS, Azure App Proxy, WPAD, and MFA technologies, especially Certificate Based Authentication (CBA)
Deep knowledge of Active Directory, including: Domain controller maintenance and upgrades GPO management DNS and core AD infrastructure
Experience with Entra ID (Azure AD), including: Application registrations and SSO onboarding Intune policy management Privileged Identity Management (PIM)
Understanding of PKI technologies (LDAP directories, HSMs, OCSP) and security best practices.
Experience working within large federal IT infrastructures.
Ability to work on‑site in downtown Washington, DC.

Responsibilities

Implement, maintain, and optimize enterprise systems in alignment with organizational standards and SOPs.
Monitor and manage all installed systems, infrastructure, and directory services.
Configure, test, and maintain operating systems, application software, and system management tools.
Evaluate existing systems and provide technical guidance to IT support teams.
Lead the development and integration of customized software and hardware solutions.
Plan and implement automation to improve operational efficiency.
Design and maintain security controls to ensure data integrity and system protection.
Ensure high availability of technical resources and maintain accurate system inventories.
Provide timely reporting and rapid response to system issues or outages.
Support the development and enhancement of the client’s Enterprise Directory, including LDAP schema design, object classes, attributes, queries, and group structures.
Develop directory integration solutions across directory and database systems.
Configure and support enterprise Identity Management systems, including role‑based access, segregation of duties, workflow automation, and periodic access reviews.