Senior Identity Access Management Engineer - HYBRID

Westat•Bethesda, MD

6d•Hybrid

About The Position

Westat is seeking a Senior Identity and Access Management (IAM) Engineer to design, implement, and support IAM solutions across on-premises, cloud, and hybrid environments. The role interfaces with the Infrastructure and IT Security team and serves as a subject-matter expert in IAM technologies, cloud-based identity services, and secure access management. This is a U.S.-based role for candidates residing in the Greater D.C. Metropolitan (DMV) Area who can work in Westat’s Bethesda office three days per week. The engineer manages and optimizes identity infrastructure, supports enterprise and cloud services, improves identity systems, and works with security, network, and application teams to integrate services and meet compliance requirements, including FISMA Moderate. The position also provides technical troubleshooting, documentation, and training.

Requirements

At least 7 years of progressive IT experience, or a bachelor’s degree in a related technical field and at least 5 years of progressive IT experience.
Knowledge of Active Directory, Azure AD/Entra AD, and cloud identity services, particularly access control, authentication, and secure user lifecycle management.
Knowledge of domain controllers, trusts, and replication.
Experience managing and troubleshooting DNS.
Experience with Okta or other cloud-based IAM platforms, including SSO technologies and MFA.
Experience supporting enterprise infrastructure solutions.
Experience supporting cloud infrastructure and services, including AWS, Microsoft Azure, and Azure Cloud Services.
Must reside in the Greater D.C. Metropolitan (DMV) Area and be able to work in Westat’s Bethesda office three days per week.
Must be authorized to work in the United States on a full-time basis; Westat does not offer employment-based visa sponsorship for this role.

Nice To Haves

Meticulous, with excellent organization, analytical, and critical-thinking skills.
Clear and effective communication skills, including the ability to explain highly technical concepts in simple terms.
Ability to analyze complex issues, propose effective solutions, and implement them efficiently.
Excellent interpersonal skills and ability to work effectively with cross-functional teams and build strong relationships.

Responsibilities

Manage and optimize hybrid identity infrastructure across on-premises Active Directory and Azure AD/Entra AD, including domain controllers, group policies, authentication mechanisms, and cloud-based identity services.
Design and support multiple DNS zones and troubleshoot related issues.
Maintain and enhance Okta IAM solutions, including single sign-on (SSO), multi-factor authentication (MFA), and secure access for cloud and on-premises applications.
Work with Entra AD, M365, and other cloud-based identity management systems to streamline user provisioning, deprovisioning, access control, and identity-based cloud service integrations.
Evaluate technologies, implement best practices, and optimize identity service performance.
Collaborate with security, network, and application teams to integrate identity services and ensure compliance with regulatory requirements.
Troubleshoot and resolve complex identity-related issues while minimizing end-user impact.
Create comprehensive documentation and conduct training sessions for IT staff and end users.
Ensure compliance with industry and regulatory requirements, including FISMA Moderate compliance.