Sr. Security/IAM Engineer

Knowledge Management, Inc.•Washington, DC

23h•Remote

About The Position

Knowledge Management, Inc. is seeking a skilled Sr. Security/IAM Engineer to configure and manage identity and access management solutions in our customer's application environment. The ideal candidate will have hands-on experience with OIDC/OAuth 2.0 identity providers such as Keycloak, Microsoft Entra, Okta, or similar platforms, and a strong familiarity with identity governance principles.

Requirements

5+ years of experience with IAM solutions, including SSO, MFA, and identity governance.
Experience working closely with application owners and development teams to design and integrate IAM solutions across custom and commercial applications.
Demonstrate knowledge of current IAM security best practices and evolving identity standards.
Proficiency with Keycloak, Microsoft Entra, Okta, or similar OIDC/OAuth 2.0 providers.
Knowledge of standards-based authentication protocols (SAML, OAuth 2.0, OIDC).
Familiarity with NIST SP 800-63-3 & SP 800-53-2 and its application to identity proofing, authentication, and federation.
Strong scripting and automation skills.
Active Treasury Public Trust or equivalent Federal clearance preferred.
Must have previous experience with the IRS

Nice To Haves

Experience with SailPoint or other identity governance tools is a plus.
Familiarity with identity governance frameworks (e.g., SailPoint IdentityNow/IQ).
Experience with Active Directory/LDAP integration.
Understanding of zero-trust security models.

Responsibilities

Communicate effectively with technical and non-technical stakeholders to explain IAM concepts, designs, and tradeoffs
Assist the customer with the management and configuration of their IAM solutions (Keycloak, Microsoft Entra)
Implement SSO, MFA, and lifecycle management workflows.
Assist with the maintenance of identity provider tenants, including configuration and troubleshooting.
Design and enforce Role-Based Access Control (RBAC) and access policies. Collaborate on identity governance initiatives across the client's project scope.