Senior Identity and Access Management (IAM) Engineer

True Tandem • Fort Meade, MD

103d

About The Position

TrueTandem is seeking experienced, skilled, and passionate Senior Identity and Access Management (IAM) Engineers to support enterprise-wide cloud identity modernization initiatives for large U.S. Federal government agencies. Ideal candidates will possess deep expertise in identity lifecycle management, hybrid identity, authentication, and access control using Microsoft Entra ID and Azure AD, with the ability to design, secure, and sustain enterprise IAM architectures that comply with federal security requirements and Zero Trust principles.

Requirements

• An active TS/SCI with polygraph.
• Minimum of five (5) years of Tier II or three (3) years of Tier III IAM/Identity Services support.
• Proven ability to design, deploy, and sustain enterprise IAM solutions in hybrid cloud environments.
• Expertise with MFA, Hybrid Identity, Azure Groups, Entra ID distributed architecture, and Smart Card authentication.
• Strong understanding of Zero Trust, Conditional Access, RBAC, and authentication protocols (SAML, OIDC, OAuth2, Kerberos, LDAP).
• Proficiency with PowerShell scripting and automation for identity administration.
• Strong troubleshooting and diagnostic skills across hybrid identity systems.
• Excellent communication and documentation skills.

Nice To Haves

• Microsoft Identity and Access Administrator Associate or Azure Security Engineer certifications.
• Experience with Microsoft Entra Permissions Management, Privileged Identity Management (PIM), and Identity Governance.
• Knowledge of integrating IAM with Power Platform and enterprise applications.
• Familiarity with AOAI embedded features and Copilot capabilities for identity workflows.
• Experience with large-scale enterprise migrations involving IAM modernization.

Responsibilities

• Architect, deploy, and sustain secure IAM solutions aligned with the Microsoft Cloud Adoption Framework (CAF) and Zero Trust.
• Design, implement, and manage Multi-Factor Authentication (MFA) solutions across hybrid enterprise environments.
• Implement and maintain Hybrid Identity integrations, including synchronization of on-premises Active Directory with Entra ID.
• Manage and automate Azure Groups for access control, RBAC, and enterprise security policies.
• Engineer, configure, and maintain Entra ID distributed architecture, ensuring high availability, automated failover, load balancing, and recovery for enterprise-wide identity services.
• Incorporate Smart Card / CAC / PIV authentication into enterprise identity solutions and ensure compliance with federal standards (e.g., FIPS 201, HSPD-12).
• Monitor and optimize IAM systems for security, performance, and compliance.
• Collaborate with cross-functional teams to support application integrations with IAM platforms (SSO, federation, and conditional access).
• Ensure governance, compliance, and alignment with Zero Trust, TIC 3.0, and federal security baselines.
• Document identity and access designs, workflows, and operational runbooks.

What This Job Offers

• Career Level: Senior
• Number of Employees: 101-250 employees