IAM / Zero Trust Cybersecurity Engineer

Xtremesolutions Inc; Washington (District of Columbia); On-site; USD 100,000 - 130,000; Part time

Job summary

Xtremesolutions Inc is seeking an IAM / Zero Trust Cybersecurity Engineer to support the Congressional Budget Office. This part-time role involves designing and implementing access controls while enforcing Zero Trust principles across various environments.

The ideal candidate should have 6–10+ years of IAM experience, hands-on knowledge of Azure AD, and certifications like Microsoft SC-300 or CISSP. You will play a crucial role during IAM discovery and implementation phases.

Qualifications

• 6–10+ years of IAM and Zero Trust experience.
• Hands-on experience with Azure AD and identity provider integrations.
• Demonstrated implementation of access controls required.

Responsibilities

• Design and maintain access controls across environments.
• Configure and manage Azure AD and conditional access policies.
• Conduct access reviews and remediate excessive permissions.

Skills

IAM experience

Zero Trust principles

Azure AD

MFA implementation

PAM experience

Access control implementation

Tools

CyberArk

Delinea

SailPoint

Okta

Job description

Description

About the role

XSI is seeking an IAM / Zero Trust Cybersecurity Engineer to design, implement, and maintain identity and access controls for the cybersecurity engineering team supporting the Congressional Budget Office (CBO). This is a sustained part-time role that surges during IAM discovery, control implementation, validation, and documentation.

What you'll do

• Design, implement, and maintain least‑privilege access controls, RBAC, PAM, MFA, and authentication/authorization integrations across cloud, network, endpoint, and application environments.
• Configure and manage Entra ID / Azure AD, conditional access policies, identity provider integrations, and cloud IAM.
• Implement and govern privileged access using tools such as CyberArk, Delinea, Azure PIM, Okta, or SailPoint.
• Conduct access reviews; remediate excessive or standing permissions; govern service accounts.
• Drive MFA / passwordless rollout, group/role cleanup, identity logging, and audit evidence collection.
• Enforce Zero Trust principles across cloud, network, and endpoint environments.

Requirements

• 6–10+ years of IAM, Zero Trust, and enterprise access control experience.
• Hands‑on experience with Entra ID / Azure AD, conditional access, RBAC, MFA, privileged access, identity provider integration, cloud IAM, and access reviews.
• PAM experience with CyberArk, Delinea, Azure PIM, Okta, SailPoint, or equivalent (preferred).
• Demonstrated implementation of access controls — not policy authorship alone.

Certifications

Preferred: Microsoft SC‑300, AZ‑500, SC‑100; Okta; SailPoint; Security+, CISSP, CISM, or equivalent IAM/cloud security credentials.