Identity & Access Management (IAM) Engineer

DecisionPoint | Cortek • ,

15h • Remote

About The Position

DecisionPoint seeks an Identity & Access Management (IAM) Engineer to support enterprise identity operations and authentication services for a large federal and DoD-aligned mission environment. This role manages identity governance, access control enforcement, single sign-on (SSO) integrations, and multi-factor authentication (MFA) capabilities across cloud and on-premise environments. The IAM Engineer will contribute directly to the implementation of the Zero Trust identity pillar, ensuring secure, reliable, and policy-driven access to mission-critical systems. This position is fully remote.

Requirements

• Must hold an active Top Secret clearance, supported by a Tier 5 background investigation.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Minimum 6 years of experience in identity and access management, authentication engineering, or IAM operations.
• Experience implementing or supporting SSO integrations, MFA configurations, or identity governance processes.
• Experience managing IAM roles, policies, and permissions in cloud environments (AWS preferred).
• Experience conducting access reviews, entitlement audits, or privilege management activities.
• Experience supporting the implementation of identity-focused security controls.
• Strong understanding of IAM concepts, including authentication, authorization, federation, and identity governance.
• Experience with SSO technologies, MFA systems, and identity providers.
• Proficiency in AWS IAM roles, policies, access keys, and permission boundaries.
• Knowledge of Zero Trust identity principles and identity-centric access control models.
• Understanding of DoD cybersecurity requirements related to identity and access management.
• Security+ certification.
• Strong problem-solving abilities for diagnosing authentication and access issues.
• Excellent communication skills for collaborating with cybersecurity, engineering, and application teams.
• High attention to detail for managing access controls, policies, and identity workflows.
• Ability to manage multiple IAM initiatives in a fast-paced, mission-critical environment.
• Strong documentation skills for maintaining identity policies, standards, and technical procedures.

Nice To Haves

• Experience with directory services (e.g., Active Directory, Azure AD).
• Familiarity with identity risk scoring, behavioral analytics, or conditional access signals.
• Experience integrating IAM with CI/CD pipelines or DevSecOps workflows.
• AWS IAM or AWS Security specialty certification.
• Additional DoD 8570/8140 IAM-related certifications.

Responsibilities

• Manage SSO integrations across enterprise applications and services.
• Configure and maintain identity governance workflows, account lifecycle management, and access approval processes.
• Implement and manage MFA, conditional access policies, and identity verification mechanisms.
• Support development and enforcement of identity-based access controls aligned with Zero Trust principles.
• Configure IAM roles, permissions, and policies in cloud environments, including AWS IAM.
• Conduct access reviews, entitlement audits, and privileged access assessments.
• Partner with cybersecurity teams to align identity controls with DoD security and compliance requirements.
• Troubleshoot identity issues related to SSO, MFA, directory services, and authentication flows.
• Assist with identity roadmap planning, modernization activities, and capability enhancements.
• Maintain identity standards, configuration documentation, and architectural artifacts.
• Support incident response activities related to identity threats or compromised accounts.
• Contribute to the development and refinement of IAM procedures, playbooks, and governance models.

Benefits

• Equal Employment Opportunity and Affirmative Action employer
• Will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior