IAM Architect

CACI International Inc; Vienna (VA); On-site; USD 132,000 - 290,000; Full time

Job summary

CAC I International Inc. seeks an IAM Architect to lead the design and implementation of enterprise IAM solutions, focusing on identity and access management across Azure and government-grade platforms.

The role involves coordinating with Azure, security, and network teams to deliver secure identity services and automate processes. You will guide IAM engineering teams, define solutions to reduce risk, and help accelerate business initiatives while ensuring robust PKI, SSO, and RBAC

Qualifications

• BA/BS in a related field with 10+ years of exp or AA with 15+ years of exp
• Experience in identity management tools and technologies
• Strong knowledge of government smart card authentication (HSPD-12)
• Expert knowledge of SAML, OAuth, OpenID Connect, WSO2, Kerberos
• RBAC solutions for cloud environments (Azure)
• PowerShell scripting and automation
• Azure PIM, Access Reviews, Service Principals, Managed Identities, ABAC
• Enterprise PKI integration (SCEP/ACME)
• Experience creating architecture documentation
• Strong communication and written skills

Responsibilities

• Design IAM solutions for authentication methods (PIV/Certificate Base, FIDO2)
• Lead IAM integration with business apps and SSO (SAML/OAuth/OpenID)
• Define org constructs, naming, and user access roles
• Develop processes/workflows for onboarding, lifecycle, and privileged access
• Advise stakeholders on IAM best practices
• Define and improve Azure Entra ID, certificate lifecycle, and PAM
• Identify opportunities for automated onboarding/offboarding

Skills

Identity management

HSPD-12

SAML

OAuth

OpenID Connect

WSO2

Kerberos

RBAC (Azure)

PowerShell

Azure PIM

Access Reviews

Service Principals

Managed Identities

ABAC

PKI integration (SCEP/ACME)

Technical architecture docs

Communication/written skills

Education

BA/BS + 10 years applicable experience

AA + 15 years applicable experience

Tools

Microsoft Azure

WSO2

SCEP

ACME clients

Job description

Job Title: IAM Architect
Job Category: Information Technology
Time Type: Full time
Minimum Clearance Required to Start: None
Employee Type: Regular
Percentage of Travel Required: None
Type of Travel: None

The Opportunity

CACI is seeking a skilled SailPoint Identity and Access Management (IAM) Architect to join a dynamic, high-performing team. This team is responsible for operating and maintaining an IdentityIQ platform for a government customer. As an IAM architect, you will provide technical leadership and guidance to program managers and key stakeholders, focusing on enterprise-level projects and solutions. In this capacity, the IAM Architect will design solutions that are to be executed by the IAM engineer team. The Architect plays a pivotal role on the team, helping to deliver next-generation IAM services. The responsibilities include defining IAM solutions aimed at reducing organizational risk, increasing resiliency, and supporting the acceleration of business initiatives. The IAM Architect will work collaboratively alongside Microsoft Azure, Network, and Security Architects to ensure comprehensive integration and alignment across platforms. Additionally, the Architect will coordinate with vendors to evaluate, test, and implement new technology solutions to enhance the IAM environment.

Responsibilities

• Design IAM solutions to support PIV/Certificate Base Authentication, FIDO 2.
• Facilitate and support IAM integration into business applications and third parties, including Single Sign On enablement using modern protocols (SAML, OAuth, Open ID Connect)
• Collaborate with customers to define organization constructs/naming conventions and user access roles
• Provide guidance with the development of process and workflows to support IAM operation activities such as user onboarding, user lifecycle management and privilege access management
• Engage with, and advise stakeholders within the business on Identity and Access Management best practices
• Define, improve, and support Azure Entra ID, Certificate Lifecycle Management and Privileged Access Management within the organization
• Identify areas for delivery of automated solutions (e.g. onboarding/offboarding) and maturation of existing process.

Qualifications

Required:

• Ability to obtain Department of Homeland Security (DHS) Entry On Duty (EOD) - Active EOD preferred
• BA/BS + 10 years of applicable experience; AA + 15 years’ applicable experience
• Experience in the Identity space with a background in identity management tools
• Strong knowledge of HSPD12 and implementation of government smart card authentication
• Expert knowledge of authentication with SAML, OAuth, OpenID, WSO2, and Kerberos
• Prior experience in providing RBAC solutions for clouds solutions (e.g. Azure)
• Strong scripting and automation abilities including PowerShell
• Understanding of Microsoft Azure PIM, Access Reviews, Service Principles, Managed Identities and ABAC
• Strong knowledge of enterprise PKI integration with SCEP and ACME clients
• Experience in creating technical architecture documentation
• Strong communication and written skills.

Desired

ITILv3 or v4 Foundation’s certification

• Previous DHS or DoD experience
• Microsoft Azure Fundamentals
• CompTIA A+, or Network+, or Security+

Experience with Azure Cloud, scripting, and automation

What You Can Expect

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose - to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground - in your career and in our legacy.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The Proposed Salary Range For This Position Is

$131,800 - $290,000

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.