IAM Engineer

CACI International Inc; United States; Remote; USD 120,000 - 170,000; Full time

Job summary

CACI International Inc. seeks an IAM Engineer to maintain enterprise identity services for a government client. Focus on lifecycle, authentication, and privileged access, integrating controls across cloud, apps, and external services.

Role includes automation, scripting (PowerShell), and government smart card authentication with PIV/FIDO, plus SSO via SAML/OIDC. Collaboration with IAM architects and security teams is essential.

Qualifications

• Bachelor’s degree plus 8 years of applicable experience, or associate degree plus 10 years.
• Experience with identity management tools and government smart card authentication under HSPD-12.
• Strong knowledge of SAML, OAuth, OpenID, WSO2, and Kerberos authentication.
• Experience delivering cloud role-based access control, including Azure, and scripting automation such as PowerShell.
• Azure PIM, access reviews, service principals, managed identities, ABAC, and enterprise PKI integration using SCEP and ACME clients.

Responsibilities

• Build and maintain enterprise access management capabilities, including authentication with PIV or certificates and FIDO.
• Integrate applications and third parties with single sign-on using protocols such as SAML, OAuth, and OpenID Connect.
• Help define user roles, organizational structures, naming conventions, and workflows for onboarding, lifecycle management, and privileged access.
• Support Azure Entra ID, privileged access management, and enterprise PKI integration.
• Advise stakeholders on IAM practices; coordinate with cloud, network, security, and vendor teams to assess and deploy solutions.
• Identify opportunities to automate access processes with scripting and document technical architectures.

Skills

Identity management

SAML

OAuth

OpenID Connect

PowerShell scripting

Azure Entra ID

Privileged access management

Education

Bachelor's degree

Associate degree

Tools

WSO2

Kerberos

SCEP

ACME clients

Job description

Role overview

Engineer and maintain identity and access management services for a government customer, with a focus on enterprise identity lifecycle, authentication, and privileged access. You’ll implement solutions designed by IAM architects and work with cloud, network, and security teams to integrate access controls into business applications and external services. The role also supports process automation and secure authentication methods, including government smart cards and passwordless options.

Responsibilities

• Build and maintain enterprise access management capabilities, including authentication with PIV or certificates and FIDO.
• Integrate applications and third parties with single sign-on using protocols such as SAML, OAuth, and OpenID Connect.
• Help define user roles, organizational structures, naming conventions, and workflows for onboarding, lifecycle management, and privileged access.
• Support Azure Entra ID, privileged access management, and enterprise PKI integration.
• Advise stakeholders on IAM practices; coordinate with cloud, network, security, and vendor teams to assess and deploy solutions.
• Identify opportunities to automate access processes with scripting and document technical architectures.

Requirements

• Ability to obtain Department of Homeland Security Entry on Duty status; active status is preferred.
• Bachelor’s degree plus 8 years of applicable experience, or associate degree plus 10 years.
• Experience with identity management tools and government smart card authentication under HSPD-12.
• Strong knowledge of SAML, OAuth, OpenID, WSO2, and Kerberos authentication.
• Experience delivering cloud role-based access control, including Azure, and scripting automation such as PowerShell.
• Knowledge of Azure PIM, access reviews, service principals, managed identities, ABAC, and enterprise PKI integration using SCEP and ACME clients.

Nice to have

• ITIL Foundation certification, Azure Fundamentals, or CompTIA A+, Network+, or Security+.
• Prior DHS or DoD experience and background with Azure cloud automation.

Benefits and work setup

• Full-time role with no listed travel requirement.
• Benefits include healthcare, wellness, retirement, family support, continuing education, and time off.