IAM Architect — Enterprise IAM Leader

CACI; United States; On-site; USD 115,000 - 252,000; Full time

Job summary

CACI is seeking a skilled SailPoint Identity and Access Management (IAM) Architect to join a dynamic, high-performing team responsible for operating and maintaining an IdentityIQ platform for a government customer. You will provide technical leadership and design enterprise IAM solutions executed by the IAM engineer team.

You will collaborate with Microsoft Azure, Network, and Security Architects to ensure integration across platforms and coordinate with vendors to evaluate and implement new IAM

Qualifications

• Ability to obtain DHS EOD—Active EOD preferred.
• BA/BS + 10 years of applicable experience; AA + 15 years’ applicable experience.
• Experience in Identity space with a background in identity management tools.
• Strong knowledge of HSPD12 and implementation of government smart card authentication.
• Expert knowledge of authentication with SAML, OAuth, OpenID, WSO2, and Kerberos.
• Prior experience in providing RBAC solutions for clouds solutions (Azure).
• Strong scripting and automation abilities including PowerShell.
• Understanding of Microsoft Azure PIM, Access Reviews, Service Principals, Managed Identities and ABAC.
• Strong knowledge of enterprise PKI integration with SCEP and ACME clients.
• Experience in creating technical architecture documentation.
• Strong communication and written skills.

Responsibilities

• Design IAM solutions to support PIV/Certificate Base Authentication, FIDO 2.
• Facilitate and support IAM integration into business applications and third parties, including Single Sign On enablement using modern protocols (SAML, OAuth, Open ID Connect).
• Collaborate with customers to define organization constructs/naming conventions and user access roles.
• Provide guidance with the development of process and workflows to support IAM operation activities such as user onboarding, user lifecycle management and privilege access management.
• Engage with, and advise stakeholders within the business on Identity and Access Management best practices.
• Define, improve, and support Azure Entra ID, Certificate Lifecycle Management and Privileged Access Management within the organization.
• Identify areas for delivery of automated solutions (e.g. onboarding/offboarding) and maturation of existing process.

Skills

Identity management

RBAC in cloud (Azure)

SAML/OAuth/OpenID Connect

HSPD12 / smart card

Strong communication

Education

BA/BS

AA

Tools

Azure Entra ID

WSO2

PKI (SCEP/ACME)

Job description

CACI is seeking a skilled SailPoint Identity and Access Management (IAM) Architect to join a dynamic, high-performing team responsible for operating and maintaining an IdentityIQ platform for a government customer. You will provide technical leadership and design enterprise IAM solutions executed by the IAM engineer team.

You will collaborate with Microsoft Azure, Network, and Security Architects to ensure integration across platforms and coordinate with vendors to evaluate and implement new IAM