IAM Architect - Enterprise Identity & Access Leader

CACI International; Town of Vienna (WI); On-site; USD 132,000 - 290,000; Full time

Job summary

CACI International is seeking an IAM Architect to lead the design and implementation of enterprise IAM solutions for a government client. The role focuses on delivering secure, scalable identity services and integration with Azure, SSO, and PKI-driven workflows.

The successful candidate will collaborate with Azure, network, and security architects, drive automation, and define advanced IAM strategies to reduce risk and enable business acceleration.

Qualifications

• BA/BS + 10 years of applicable experience; AA + 15 years’ applicable experience.
• Experience in the Identity space with a background in identity management tools.
• Strong knowledge of HSPD12 and implementation of government smart card authentication.
• Expert knowledge of authentication with SAML, OAuth, OpenID, WSO2, and Kerberos.
• Prior experience in providing RBAC solutions for clouds solutions (e.g. Azure).
• Strong scripting and automation abilities including PowerShell.
• Understanding of Microsoft Azure PIM, Access Reviews, Service Principles, Managed Identities and ABAC.
• Strong knowledge of enterprise PKI integration with SCEP and ACME clients.
• Experience in creating technical architecture documentation.
• Strong communication and written skills.

Responsibilities

• Design IAM solutions to support PIV/Certificate Base Authentication, FIDO 2.
• Facilitate and support IAM integration into business applications and third parties, including SSO with SAML, OAuth, OpenID Connect.
• Collaborate with customers to define organization constructs/naming conventions and user access roles.
• Provide guidance with process/workflows to support IAM operations such as onboarding and lifecycle management.
• Engage with stakeholders on IAM best practices.
• Define, improve, and support Azure Entra ID, Certificate Lifecycle Management and Privileged Access Management.
• Identify areas for automated onboarding/offboarding and maturation of existing processes.

Skills

IAM architecture

RBAC for cloud Azure

SAML/OAuth/OpenID Connect

PowerShell scripting

PKI integration

Education

BA/BS + 10 years of applicable experience

AA + 15 years’ applicable experience

Tools

Microsoft Azure

Azure Entra ID

Azure PIM & Access Reviews

SCEP/ACME PKI integration

Job description

CACI International is seeking an IAM Architect to lead the design and implementation of enterprise IAM solutions for a government client. The role focuses on delivering secure, scalable identity services and integration with Azure, SSO, and PKI-driven workflows.

The successful candidate will collaborate with Azure, network, and security architects, drive automation, and define advanced IAM strategies to reduce risk and enable business acceleration.