IAM Engineer

SOS International LLC; Miami (FL); Remote; USD 90,000 - 186,000; Full time

Job summary

SOSi seeks an IAM Engineer to help design, implement, and sustain a scalable IAM ecosystem for a DoD customer. The role focuses on secure authentication, Zero Trust, RBAC, and integration with Entra ID, PKI, and CAC across cloud and on‑prem environments.

Requires 5+ years of IAM experience, cloud governance familiarity, and DoD security framework knowledge. Remote work from Florida with a SECRET clearance is offered.

Qualifications

• Active SECRET clearance and ability to maintain it.
• Bachelor's degree in Cybersecurity, CS, or related field.
• 5+ years of IAM engineering experience.
• Experience with IAM in cloud environments (AWS/Azure) and identity governance tools.
• Experience with SAML, OAuth, OpenID Connect, RBAC, MFA.

Responsibilities

• Design, implement, and manage IAM solutions across cloud and on‑prem environments.
• Enforce Zero Trust principles and RBAC to protect mission systems.
• Integrate IAM with Entra ID, PKI, and CAC authentication.
• Oversee IAM automation for provisioning/de-provisioning of users and roles.
• Submit IAM Compliance Report detailing configurations and logs.

Skills

Secret clearance

Zero Trust

RBAC

MFA

SAML/OIDC/OAuth

Education

Bachelor's degree in Cybersecurity or related field

Tools

Microsoft Entra ID

Okta

Ping Identity

AWS IAM

Job description

Remote, Florida, USA

Full-time

Clearance Requirement: Secret

Compensation: USD 89696 - USD 186293 - yearly

Company Description

Founded in 1989, SOSi is among the largest private, founder-owned technology and services integrators in the defense and government services industry. We deliver tailored solutions, tested leadership, and trusted results to enable national security missions worldwide.

Job Description

This position is contingent upon contract award

SOSi is seeking a IAM Engineers to support mission requirements for a structured approach to further develop, integrate, and sustain a scalable, federated data ecosystem that enhances interoperability, governance, and mission-driven analytics for a DoD customer. The primary objective of the program is to bridge the operational gaps between DoD, IC, interagency, and non-traditional international partners to enable real-time information sharing, dynamic data integration, and mission-tailored analytical capabilities.

• Design, implement, and manage Identity and Access Management (IAM) solutions, ensuring secure authentication and access control across cloud and on-premises environments.

• Enforce Zero Trust Architecture (ZTA) principles and role-based access control (RBAC) policies to protect mission-critical systems.

• Integrate IAM solutions with Microsoft Entra ID (formerly Azure Active Directory), Public Key Infrastructure (PKI), and Common Access Card (CAC) authentication mechanisms.

• Oversee IAM automation, ensuring streamlined provisioning and de-provisioning of user roles and permissions.

• Submit the Identity & Access Management Compliance Report, detailing system configurations, access logs, and compliance status

Qualifications

Minimum Requirements:

• Active in-scope SECRET Clearance.

• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or a related field, or

• five (5) years of equivalent experience in IAM engineering.

• Demonstrated experience in designing and managing IAM frameworks in cloud environments (AWS, Azure), configuring identity governance tools, and implementing zero-trust architecture models.

• Experience with tools such as Microsoft Entra ID (formerly Azure AD), Okta, Ping Identity, or AWS IAM is required.

• Possess the knowledge and capability to design, implement, and manage Identity and Access Management (IAM) solutions within secure cloud and on-premises environments.

• Proficient in authentication protocols (SAML, OAuth, OpenID Connect), role-based access control (RBAC), multi-factor authentication (MFA), and identity federation across hybrid environments.

• Strong knowledge of DoD IL2, IL4, and IL5 security frameworks and compliance standards is required.

Preferred Qualifications:

• Desirable but not required certifications include Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, or Microsoft Certified: Identity and Access Administrator Associate.

Additional Information

Working Conditions:

• The work to be performed remotely

• Must have strong internet connection

• Quit workspace free from interruptions

Working at SOSi:

All interested individuals will receive consideration and will not be discriminated against for any reason.

SOSi is an equal employment opportunity employer and affirmative action employer. All interested individuals will receive consideration and will not be discriminated against on the basis of race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity, genetic information, or protected veteran status. SOSi takes affirmative action in support of its policy to advance diversity and inclusion of individuals who are minorities, women, protected veterans, and individuals with disabilities.