IAM Engineer

SOSi; Town of Florida (NY); Remote; USD 120,000 - 180,000; Full time

Job summary

SOSi seeks an IAM Engineer to design, implement, and manage scalable identity and access management solutions across cloud and on-prem environments for a DoD customer. The role emphasizes Zero Trust and RBAC to secure mission-critical systems, with integration to Microsoft Entra ID, PKI, and CAC authentication.

Qualified candidates have SECRET clearance, a cybersecurity-related degree or equivalent experience, and hands-on work with IAM tools (Okta, Ping Identity, AWS IAM).

Qualifications

• Active in-scope SECRET clearance.
• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or related field.
• Five years of IAM engineering experience or equivalent.
• Experience designing and managing IAM in cloud (AWS/Azure) and on-prem environments.
• Knowledge of authentication protocols (SAML, OAuth, OpenID Connect) and RBAC/MFA.
• Experience with identity governance tools and RBAC across hybrid environments.
• Strong understanding of DoD IL2/IL4/IL5 security frameworks and compliance standards.
• Preferred certifications include CISSP, AWS Certified Security, or MS Identity Admin.

Responsibilities

• Design, implement, and manage IAM solutions across cloud and on-prem environments.
• Enforce Zero Trust Architecture and RBAC policies to protect critical systems.
• Integrate IAM with Microsoft Entra ID, PKI, and CAC authentication mechanisms.
• Oversee IAM automation, provisioning and de-provisioning of user roles and permissions.
• Submit IAM Compliance Report detailing configurations, logs, and status.

Skills

IAM design & management

Zero Trust Architecture

RBAC & MFA

Cloud IAM (AWS/Azure)

SAML/OIDC/OAuth

Identity governance tools

DoD IL2/IL4/IL5 compliance

Hybrid cloud/on-prem authentication

Education

Bachelor's degree in Cybersecurity/Info Assurance/CS

Tools

Microsoft Entra ID (Azure AD)

Okta

Ping Identity

AWS IAM

Job description

Company Description

Founded in 1989, SOSi is among the largest private, founder-owned technology and services integrators in the defense and government services industry. We deliver tailored solutions, tested leadership, and trusted results to enable national security missions worldwide.

Job Description

**This position is contingent upon contract award**

SOSi is seeking a IAM Engineers to support mission requirements for a structured approach to further develop, integrate, and sustain a scalable, federated data ecosystem that enhances interoperability, governance, and mission-driven analytics for a DoD customer. The primary objective of the program is to bridge the operational gaps between DoD, IC, interagency, and non-traditional international partners to enable real-time information sharing, dynamic data integration, and mission-tailored analytical capabilities.

• Design, implement, and manage Identity and Access Management (IAM) solutions, ensuring secure authentication and access control across cloud and on-premises environments.


• Enforce Zero Trust Architecture (ZTA) principles and role-based access control (RBAC) policies to protect mission-critical systems.


• Integrate IAM solutions with Microsoft Entra ID (formerly Azure Active Directory), Public Key Infrastructure (PKI), and Common Access Card (CAC) authentication mechanisms.


• Oversee IAM automation, ensuring streamlined provisioning and de-provisioning of user roles and permissions.


• Submit the Identity & Access Management Compliance Report, detailing system configurations, access logs, and compliance status

Qualifications

Minimum Requirements:

• Active in-scope SECRET Clearance.


• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or a related field, or
  
  
  
  • five (5) years of equivalent experience inIAMengineering.
  
  
  
  


• Demonstrated experience in designing and managing IAM frameworks in cloud environments (AWS, Azure), configuring identity governance tools, and implementing zero-trust architecture models.


• Experience with tools such as Microsoft Entra ID (formerly Azure AD), Okta, Ping Identity, or AWS IAM is required.


• Possess the knowledge and capability to design, implement, and manage Identity and Access Management (IAM) solutions within secure cloud and on-premises environments.


• Proficient in authentication protocols (SAML, OAuth, OpenID Connect), role-based access control (RBAC), multi-factor authentication (MFA), and identity federation across hybrid environments.


• Strong knowledge of DoD IL2, IL4, and IL5 security frameworks and compliance standards is required.

Preferred Qualifications:

• Desirable but not required certifications include Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, or Microsoft Certified: Identity and Access Administrator Associate.

Additional Information

Working Conditions:

• The work to be performed remotely


• Must have strong internet connection


• Quit workspace free from interruptions

Working at SOSi

All interested individuals will receive consideration and will not be discriminated against for any reason.