IAM Engineer

CACI International; Town of Vienna (WI); On-site; USD 113,000 - 238,000; Full time

Job summary

CACI International is seeking an experienced SailPoint IAM Engineer to join a dynamic team responsible for operating and maintaining the Identity IQ platform for a government customer. The IAM Engineer will provide technical guidance and focus on enterprise-scale projects.

The role involves implementing IAM solutions with SSO (SAML, OAuth, OpenID Connect), Azure Entra ID, and PKI integration, collaborating with Azure, network, and security teams to ensure secure access management.

Qualifications

• Experience in identity management with government-grade IAM solutions.
• Proficiency with SAML, OAuth, OpenID Connect.
• Experience with Azure RBAC and PIM.
• Strong scripting and automation abilities, including PowerShell.
• Excellent communication skills, written and verbal.

Responsibilities

• Define, develop, and implement IAM solutions to reduce risk and enhance resiliency.
• Collaborate with Azure, network, and security architecture teams to ensure seamless IAM integration.
• Coordinate with vendors to evaluate, test, and deploy new technology solutions.
• Implement IAM to support PIV/Certificate Based Authentication, FIDO.
• Engineer and maintain a secure enterprise access management solution.
• Enable Single Sign-On using SAML, OAuth, OpenID Connect.
• Define naming conventions and user access roles with stakeholders.
• Develop processes for onboarding, lifecycle management and privileged access.

Skills

Identity management

RBAC solutions

Scripting & automation

PowerShell

Azure Entra ID

SSO protocols

Communication skills

PKI integration

Education

BA/BS in related field

Associate degree

Tools

WSO2

Azure PIM

ACME clients

SCEP

Managed Identities

Job description

Job Title: IAM Engineer

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: None

Employee Type: Regular

Percentage of Travel Required: None

Type of Travel: None

The Opportunity:

CACI is seeking an experienced SailPoint IAM Engineer to join a dynamic, high-performing team responsible for operating and maintaining the Identity IQ platform for a government customer. In this role, the Identity and Access Management (IAM) engineer will provide technical guidance to the program manager and key stakeholders, specifically focusing on enterprise-scale projects and solutions. The IAM Engineer will play a critical role in implementing solutions designed by the IAM architect, ensuring that these solutions meet organizational needs and standards.

Responsibilities:

As a key member of the team delivering next-generation IAM services, the engineer will assist in defining, developing, and implementing IAM solutions that reduce risk and enhance resiliency, while also supporting the acceleration of important business initiatives. Collaboration will be essential; the engineer will work closely with professionals in Microsoft Azure, network, and security architecture to ensure seamless integration and operation of IAM services. Additionally, the engineer will coordinate with vendors to evaluate, test, and deploy new technology solutions as needed.

Implement IAM solutions to support PIV/Certificate Base Authentication, FIDO

• Engineer and maintain a secure and robust enterprise access management solution
• Facilitate and support IAM integration into business applications and third parties, including Single Sign On enablement using modern protocols (SAML, OAuth, Open ID Connect)
• Collaborate with customers to define organization constructs/naming conventions and user access roles
• Assist with the development of process and workflows to support IAM operation activities such as user onboarding, user lifecycle management and privilege access management
• Provide assistance with the integration of an Enterprise PKI solution.
• Engage with, and advise stakeholders within the business on Identity and Access Management best practices
• Define, improve, and support Azure Entra ID and Privileged Access Management within the organization
• Identify areas for delivery of automated solutions (e.g. onboarding/offboarding) and maturation of existing processes by leveraging scripting

Qualifications:

Required:

• Ability to obtain Department of Homeland Security (DHS) Entry On Duty (EOD) - Active EOD preferred
• BA/BS + 8 years of applicable experience; AA + 10 years’ applicable experience
• Experience in the Identity space with a background in identity management tools
• Strong knowledge of HSPD12 and implementation of government smart card authentication
• Expert knowledge of authentication with SAML, OAuth, OpenID, WSO2, and Kerberos
• Prior experience in providing RBAC solutions for clouds solutions (e.g. Azure)
• Strong scripting and automation abilities including PowerShell
• Understanding of Microsoft Azure PIM, Access Reviews, Service Principles, Managed Identities and ABAC
• Strong knowledge of enterprise PKI integration with SCEP and ACME clients
• Experience in creating technical architecture documentation
• Strong communication and written skills.

Desired:

• ITILv3 or v4 Foundation’s certification
• Previous DHS or DoD experience
• Microsoft Azure Fundamentals
• CompTIA A+, or Network+, or Security+
• Experience with Azure Cloud, scripting, and automation

What You Can Expect:

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation’s most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$113,200 - $237,800

CACI is anEqualOpportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any otherprotectedcharacteristic.