Cloud Onboarding Engineer – Identity & Access Management

Bespoke Technologies, Inc.; Reston (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Bespoke Technologies, Inc. in Reston, VA seeks a Senior Principal Cloud Onboarding Engineer for Identity & Access Management. This role requires active Poly clearance and hands-on experience integrating cloud environments with enterprise IAM architectures.

Responsibilities include designing, deploying, securing, and operating OCI IAM solutions, federation, SSO, and least-privilege access models, with strong coordination across Oracle and client stakeholders.

Qualifications

• Proven experience integrating cloud environments with agency enterprise services and identity architectures.
• Hands-on design, deployment, and operation of OCI identity, audit logging, network security, secrets management, and privileged-access controls.
• Experience integrating applications with NGA GEOAxIS or comparable enterprise IAM platforms.
• Experience implementing federation, SSO, MFA, lifecycle provisioning/deprovisioning, RBAC/ABAC, least-privilege access.
• Proficiency with SAML 2.0, OpenID Connect/OAuth 2.0, SCIM, LDAP, and AD including token claims and metadata exchange.
• Apply Zero Trust principles and document secure identity designs and procedures.
• Knowledge of RMF, ICD 503, NGA A&A processes and security-control evidence.
• Strong stakeholder communication for solution architectures with Oracle personnel and clients.
• 8+ years relevant experience to this position.

Skills

Cloud integration

OCI security

IAM integration

Federation & SSO

SAML/OIDC/OAuth

Zero Trust

RMF/ICD503

Stakeholder coordination

Experience 8+ years

Job description

BT- 447 – Cloud Onboarding Engineer – Identity & Access Management

Skill Level: Senior Principal

Location: Reston, VA

• Please do NOT apply if you do not have an active Poly clearance. Those without a Poly will not be considered.**

Required Skills

• Demonstrated experience integrating commercial cloud environments with agency-specific enterprise services and identity architectures in a secure, regulated, or mission environment.
• Proven hands-on experience designing, deploying, securing, and operating OCI solutions, including identity, audit logging, network security, secrets and key management, and privileged-access controls.
• Experience integrating applications and cloud services with NGA GEOAxIS and/or comparable enterprise IAM platforms.
• Hands-on experience implementing federation, SSO, MFA, identity lifecycle provisioning and deprovisioning, RBAC/ABAC, and least-privilege access models.
• Proficiency with SAML 2.0, OpenID Connect/OAuth 2.0, SCIM, LDAP, and Active Directory, including token claims and attribute mapping, certificates, metadata exchange, and authentication-flow troubleshooting.
• Experience applying Zero Trust principles and documenting secure identity designs, control implementations, test evidence, and operating procedures.
• Working knowledge of RMF, ICD 503, and NGA A&A processes, including security-control implementation and assessment evidence.
• Strong stakeholder communication skills and ability to coordinate solution architectures with Oracle personnel and client stakeholders.
• 8+ years relevant experience to this position

Desired Skills

• Associate- or Professional-level OCI certification in Architect, Security, Networking, or Cloud Operations.
• Experience supporting security assessments, authorization packages, control validation, and remediation tracking.
• Experience integrating cloud and identity logs with enterprise monitoring or SIEM platforms.
• Experience with Terraform, OCI Resource Manager, or comparable infrastructure-as-code and automated configuration capabilities.