Senior Identity Access Management Engineer - HYBRID

Westat•Bethesda, MD

23h•Hybrid

About The Position

Westat is seeking a Senior Identity and Access Management (IAM) Engineer to design, implement, and support the organization’s IAM solutions across on-premises, cloud, and hybrid environments. This role will interface with the Infrastructure and IT Security team and serve as the subject-matter expert for IAM technologies, cloud-based identity services, and secure access management. This is a US-based role, and applicants must reside in the Greater D.C. Metropolitan (DMV) Area and be able to work in Westat’s Bethesda office 3 days per week.

Requirements

A minimum of 7 years of progressive IT experience; or a bachelor’s degree in a related technical field with a minimum of 5 years of progressive IT experience.
Demonstrated knowledge of Active Directory, Azure AD/Entra AD, and cloud identity services, with a focus on access control, authentication, and secure user lifecycle management.
Demonstrated knowledge of domain controllers, trusts, and replication.
Demonstrated experience in DNS management and troubleshooting.
Experience with Okta or other cloud-based identity and access management (IAM) platforms, including Single Sign-On technologies and multi-factor authentication.
Demonstrated experience supporting enterprise infrastructure solutions.
Demonstrated experience supporting cloud infrastructure and services, including Amazon Web Services (AWS), Microsoft Azure, and Azure Cloud Services.

Nice To Haves

Meticulous with excellent organization and analytical and critical thinking skills.
Able to communicate clearly and effectively.
Ability to explain highly technical concepts in simple terms.
Ability to analyze complex issues, propose effective solutions, and implement them efficiently.
Excellent people skills to work effectively with cross-functional teams and build strong relationships.

Responsibilities

Manage and optimize hybrid identity infrastructure across on-premises Active Directory, Azure AD/Entra AD, including domain controllers, group policies, authentication mechanisms, and cloud-based identity services.
Design and support multiple DNS zones and troubleshoot related issues.
Maintain and enhance Okta identity and access management solutions, including single sign-on (SSO), multi-factor authentication (MFA), and secure access for cloud and on-premises applications.
Work with Entra AD, M365, and other cloud-based identity management systems to streamline user provisioning, deprovisioning, access control, and identity-based cloud service integrations.
Continuously improve identity services by evaluating innovative technologies, implementing best practices, and optimizing performance.
Work closely with security, network, and application teams to integrate identity services seamlessly while ensuring compliance and other regulatory requirements.
Provide technical support by troubleshooting and resolving complex identity-related issues, minimizing impact on end users.
Create comprehensive documentation and conduct training sessions for IT staff and end-users.
Ensure compliance with industry and regulatory requirements, including FISMA Moderate compliance.