Senior ID & Access Management Engineer

Navy Federal Credit Union•Vienna, VA

5d•$115,600 - $181,200•Onsite

About The Position

The Senior ID & Access Management Engineer serves as a Technical Lead and Product Owner supporting Navy Federal's Client Identity, Authentication, Authorization, Federation, and Fraud Prevention platforms. The role combines hands-on engineering expertise with technical leadership, solution design, stakeholder engagement, and product ownership to deliver secure, scalable, and resilient member identity solutions. The engineer provides architecture guidance and engineering direction across IAM initiatives, leads solutioning with business and technical stakeholders, and manages IAM product backlogs and priorities. The role translates business requirements into technical designs and implementation plans, develops federation integrations, reviews code and designs, mentors engineers, and supports platform security, availability, resilience, and compliance. It also involves applying Agile, Change Management, and DevSecOps processes and evaluating technologies and trends to support modernization.

Requirements

Extensive experience with enterprise IAM platforms such as ForgeRock, Ping, SiteMinder, Azure AD, or similar technologies.
Extensive experience deploying and supporting ForgeRock on Azure Kubernetes Service (AKS).
Strong knowledge of authentication, authorization, identity federation, MFA, fraud prevention, and access management technologies.
Experience with SAML, OAuth, OpenID Connect, LDAP, Directory Services, and API security.
Proficiency with JavaScript, Groovy, and IAM-related scripting and configuration.
Experience performing code reviews and leading technical design reviews.
Experience serving as a Technical Lead, Product Owner, Engineering Lead, or Solution Lead.
Ability to lead solutioning efforts and manage relationships with business stakeholders, executives, vendors, and technical teams.
Experience managing Agile backlogs and prioritizing work based on business value and technical risk.
Strong analytical, problem-solving, planning, and organizational skills.
Excellent verbal and written communication skills, including presenting technical concepts to diverse audiences.

Nice To Haves

Bachelor's degree in Information Technology, Computer Science, Engineering, Business, or a related field.
CISSP, CISA, CCSP, ForgeRock, Azure, Kubernetes, or other security and cloud certifications.
Certified Product Owner (CSPO), SAFe Product Owner/Product Manager (POPM), or similar Agile certification.
Experience leading large-scale IAM modernization or migration initiatives.
Experience with Kubernetes, Docker, Azure cloud services, and DevSecOps practices.
Experience within financial services, digital banking, or highly regulated environments.

Responsibilities

Provide technical leadership, architecture guidance, engineering direction, and oversight for IAM initiatives across projects and teams.
Lead solutioning discussions with business, security, digital, fraud, infrastructure, and operations stakeholders.
Act as Product Owner for IAM capabilities by managing backlogs, prioritizing features, defining requirements, and aligning delivery with business objectives.
Translate business requirements into technical designs, features, acceptance criteria, and implementation plans.
Develop and support SAML, OAuth, OpenID Connect, and other federation integrations with internal and external partners.
Conduct code and design reviews to ensure security, scalability, performance, and maintainability.
Mentor engineers and promote engineering best practices, secure coding standards, and DevSecOps principles.
Implement changes across multiple environments using Agile, Change Management, and DevSecOps processes.
Evaluate emerging IAM technologies, industry trends, and fraud prevention capabilities to drive modernization.
Present technical solutions, recommendations, risks, and roadmap updates to leadership and business stakeholders.
Ensure the security, availability, resilience, and compliance of IAM platforms supporting member-facing channels.