IAM Architect: PIV/Certificate & Cloud Access Orchestration

Remotedxb; Dubai; On-site; AED 400,000 - 640,000; Full time

Job summary

CACI is seeking an experienced IAM architect to design authentication and access solutions in support of government missions. The role focuses on PIV/Certificate Base Authentication, FIDO 2, and SAML, OAuth, and OpenID Connect integrations.

You will collaborate with customers to define roles, lifecycle management, and privileged access programs, while guiding PKI integration, Azure Entra ID, and automated onboarding/offboarding initiatives.

Qualifications

• Ability to obtain DHS EOD clearance
• BA/BS degree with 10+ years of experience or AA with 15+ years
• Expert knowledge of authentication protocols: SAML, OAuth, OpenID, WSO2, Kerberos
• Strong scripting and automation using PowerShell
• Experience with Microsoft Azure PIM, Access Reviews, and ABAC
• Knowledge of enterprise PKI integration with SCEP and ACME
• Experience creating technical architecture documentation

Responsibilities

• Design IAM solutions to support PIV/Certificate Base Authentication and FIDO 2
• Facilitate IAM integration into business applications using SAML, OAuth, and OpenID Connect
• Collaborate with customers to define organization constructs and user access roles
• Provide guidance on user lifecycle management and privilege access management
• Define and support Azure Entra ID and Certificate Lifecycle Management
• Identify opportunities for automated onboarding and offboarding solutions

Skills

Authentication protocols

PowerShell scripting

IAM design & integration

User lifecycle & privileged access

Education

BA/BS in a related field

AA with 15+ years experience

Tools

WSO2

Kerberos

Azure PIM

ACME clients

SCEP

Job description

CACI is seeking an experienced IAM architect to design authentication and access solutions in support of government missions. The role focuses on PIV/Certificate Base Authentication, FIDO 2, and SAML, OAuth, and OpenID Connect integrations.

You will collaborate with customers to define roles, lifecycle management, and privileged access programs, while guiding PKI integration, Azure Entra ID, and automated onboarding/offboarding initiatives.