IAM Architect

Remotedxb; Dubai; On-site; AED 400,000 - 640,000; Full time

Job summary

CACI is seeking an experienced IAM architect to design authentication and access solutions in support of government missions. The role focuses on PIV/Certificate Base Authentication, FIDO 2, and SAML, OAuth, and OpenID Connect integrations.

You will collaborate with customers to define roles, lifecycle management, and privileged access programs, while guiding PKI integration, Azure Entra ID, and automated onboarding/offboarding initiatives.

Qualifications

• Ability to obtain DHS EOD clearance
• BA/BS degree with 10+ years of experience or AA with 15+ years
• Expert knowledge of authentication protocols: SAML, OAuth, OpenID, WSO2, Kerberos
• Strong scripting and automation using PowerShell
• Experience with Microsoft Azure PIM, Access Reviews, and ABAC
• Knowledge of enterprise PKI integration with SCEP and ACME
• Experience creating technical architecture documentation

Responsibilities

• Design IAM solutions to support PIV/Certificate Base Authentication and FIDO 2
• Facilitate IAM integration into business applications using SAML, OAuth, and OpenID Connect
• Collaborate with customers to define organization constructs and user access roles
• Provide guidance on user lifecycle management and privilege access management
• Define and support Azure Entra ID and Certificate Lifecycle Management
• Identify opportunities for automated onboarding and offboarding solutions

Skills

Authentication protocols

PowerShell scripting

IAM design & integration

User lifecycle & privileged access

Education

BA/BS in a related field

AA with 15+ years experience

Tools

WSO2

Kerberos

Azure PIM

ACME clients

SCEP

Job description

Responsibilities

• Design IAM solutions to support PIV/Certificate Base Authentication and FIDO 2
• Facilitate IAM integration into business applications using SAML, OAuth, and OpenID Connect
• Collaborate with customers to define organization constructs and user access roles
• Provide guidance on user lifecycle management and privilege access management
• Define and support Azure Entra ID and Certificate Lifecycle Management
• Identify opportunities for automated onboarding and offboarding solutions

Requirements

• Ability to obtain Department of Homeland Security (DHS) Entry On Duty (EOD)
• BA/BS with 10+ years of applicable experience or AA with 15+ years
• Expert knowledge of authentication protocols including SAML, OAuth, OpenID, WSO2, and Kerberos
• Strong scripting and automation abilities using PowerShell
• Experience with Microsoft Azure PIM, Access Reviews, and ABAC
• Strong knowledge of enterprise PKI integration with SCEP and ACME clients
• Experience creating technical architecture documentation

Preferred Qualifications

• ITILv3 or v4 Foundation certification
• Previous DHS or DoD experience
• Microsoft Azure Fundamentals certification
• CompTIA A+, Network+, or Security+ certification

About the Company

CACI is a mission-driven organization focused on providing technical leadership and innovation to support national security and government missions.