IAM Engineer

Remotedxb; Dubai; On-site; AED 240,000 - 360,000; Full time

Job summary

CACI in Dubai is seeking an experienced IAM Specialist to design and implement secure access controls for government-grade environments. You will lead authentication strategies, integrate SAML/OIDC, and work closely with customers on role-based access across enterprise apps.

The role emphasizes scripting and automation with PowerShell, Azure RBAC/PIM, and PKI integration to strengthen identity governance and privileged access.

Qualifications

• 8+ years in identity management required.
• Experience with PIV/Certificate-based authentication.
• Strong scripting and automation abilities (PowerShell).
• Knowledge of HSPD12 and government smart card authentication.
• Experience with Azure RBAC and PIM.
• Ability to document architecture and processes.

Responsibilities

• Implement IAM solutions to support PIV/Certificate Base Authentication and FIDO
• Engineer and maintain a secure enterprise access management solution
• Facilitate IAM integration into business applications using SAML, OAuth, and OpenID Connect
• Collaborate with customers to define organization constructs and user access roles
• Develop processes for user onboarding, lifecycle management, and privilege access management
• Provide assistance with Enterprise PKI solution integration
• Define and support Azure Entra ID and Privileged Access Management
• Identify and deliver automated solutions using scripting

Skills

Identity management

PowerShell

RBAC Azure

Azure PIM

SAML/OIDC

Communication

Education

BA/BS + 8 years

AA + 10 years

Tools

WSO2

OpenID Connect

Job description

Responsibilities

• Implement IAM solutions to support PIV/Certificate Base Authentication and FIDO
• Engineer and maintain a secure enterprise access management solution
• Facilitate IAM integration into business applications using SAML, OAuth, and OpenID Connect
• Collaborate with customers to define organization constructs and user access roles
• Develop processes for user onboarding, lifecycle management, and privilege access management
• Provide assistance with Enterprise PKI solution integration
• Define and support Azure Entra ID and Privileged Access Management
• Identify and deliver automated solutions using scripting

Requirements

• BA/BS + 8 years of applicable experience or AA + 10 years
• Experience in the Identity space with identity management tools
• Strong knowledge of HSPD12 and government smart card authentication
• Expert knowledge of authentication with SAML, OAuth, OpenID, WSO2, and Kerberos
• Prior experience in providing RBAC solutions for cloud solutions like Azure
• Strong scripting and automation abilities including PowerShell
• Understanding of Microsoft Azure PIM, Access Reviews, Service Principles, Managed Identities, and ABAC
• Strong knowledge of enterprise PKI integration with SCEP and ACME clients
• Experience in creating technical architecture documentation
• Strong communication and written skills

Preferred Qualifications

• ITILv3 or v4 Foundation certification
• Previous DHS or DoD experience
• Microsoft Azure Fundamentals
• CompTIA A+, Network+, or Security+

About the Company

CACI is a high-performing group dedicated to our customer's missions, ensuring the safety of our nation through character and innovation.