Identity & Access Management Engineer

Zachary Piper Solutions; Norfolk (VA); Hybrid; USD 95,000 - 100,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401k Plan

Holidays

PTO

Sick leave

Job summary

Zachary Piper Solutions is seeking an IDAM Engineer to support a long-term Navy DoD program in Norfolk, VA (onsite). The role focuses on Active Directory, identity management, authentication, automation, and platform reliability across mission-critical Navy infrastructure.

The ideal candidate has 2+ years in identity management and Windows Server administration, with DoD security clearances or eligibility, and hands-on scripting skills in PowerShell or Python.

Qualifications

• 2+ years and hands-on experience with identity management and Windows Server environments.
• Active Secret clearance and DoD 8570/8140 style certification preferred.
• Proficient in scripting/automation (PowerShell, Python, Ansible).
• Experience with AD, GPO, DNS, DHCP, and security compliance.

Responsibilities

• Administer, configure, maintain, and troubleshoot Active Directory, GPO, DNS, DHCP, and Windows Server environments.
• Support identity management techs like MIM, ADFS, Delinea, and PKI.
• Patch, upgrade, and perform lifecycle management with STIG remediation.
• Develop automation with PowerShell, Python, Ansible and other tools.
• Support CI/CD pipelines, IaC, and automated deployment workflows.
• Monitor performance and reliability using Splunk and other tools.
• Execute automated performance, load, resilience, and failure testing.
• Collaborate with SRE, DevOps, cybersecurity, and vendor teams.
• Support cloud/container infra with Azure, AWS, Kubernetes/OpenShift, Docker.
• Document configurations and operational procedures.

Skills

Identity management

Active Directory

Windows Server

PowerShell

Python

Ansible

CI/CD

SRE/DevOps concepts

Communication

Collaboration

Education

Bachelor’s degree in CS/IT/Engineering

Tools

MIM

FIM

ADFS

Delinea

PKI

PowerShell

Python

Terraform

CloudFormation

Jenkins

GitLab

Azure

AWS

Kubernetes

Docker

Job description

Zachary Piper Solutions is seeking an IDAM Engineer to support a long-term DOD program focused on Navy enterprise identity management, infrastructure automation, cybersecurity, and platform reliability. This position is 100% onsite in Norfolk, VA; San Diego, CA; or Honolulu, HI. The IDAM Engineer will support enterprise identity and Windows infrastructure with a focus on Active Directory, identity management, authentication, automation, system reliability, and security compliance across mission-critical Navy infrastructure.

Responsibilities of the IDAM Engineer include:

• Administer, configure, maintain, and troubleshoot enterprise Active Directory, Group Policy, DNS, DHCP, and Windows Server environments
• Support and maintain identity management technologies including Microsoft Identity Manager (MIM), ADFS, Delinea, and PKI
• Perform system patching, STIG remediation, upgrades, troubleshooting, and lifecycle management
• Develop and maintain PowerShell, Python, Ansible, and other automation to improve identity and infrastructure operations
• Support CI/CD pipelines, infrastructure-as-code, and automated deployment workflows
• Monitor system performance, reliability, and availability using Splunk and other monitoring tools
• Develop and execute automated performance, load, resilience, and failure testing
• Identify and resolve system issues, performance bottlenecks, and reliability concerns
• Support cloud and containerized infrastructure using technologies such as Azure, AWS, Kubernetes/OpenShift, and Docker
• Collaborate with SRE, DevOps, systems, network, cybersecurity, application, vendor, and customer teams
• Support infrastructure modernization, upgrades, automation initiatives, and technical projects
• Maintain technical documentation, system configurations, automation scripts, and operational procedures

Qualifications of the IDAM Engineer include:

• 2+ years of experience supporting identity management, Active Directory, Windows Server, systems engineering, or enterprise IT environments
• Active Secret clearance
• Current Security+ or equivalent DoD IAT Level II certification
• Hands-on experience with Active Directory, Group Policy, DNS, and DHCP
• Experience with Windows Server administration and troubleshooting
• Experience with scripting or automation using PowerShell, Python, Ansible, or similar tools
• Knowledge of SRE, DevOps, CI/CD, or infrastructure automation concepts
• Strong troubleshooting, analytical, communication, and collaboration skills

Preferred Qualifications of the IDAM Engineer

• Experience with Microsoft Identity Manager (MIM) / Forefront Identity Manager (FIM)
• Experience with ADFS, Delinea, PKI, or identity federation
• Experience with Jenkins, GitLab, Bitbucket, Jira, or Azure DevOps
• Experience with Terraform, Ansible, CloudFormation, Chef, Puppet, or other IaC tools
• Experience with Azure, AWS, Kubernetes/OpenShift, or Docker
• Experience with Splunk or enterprise monitoring platforms
• Experience with DISA STIGs, IAVA, RMF, or DoD cybersecurity compliance
• Experience supporting large-scale Navy, DoD, NMCI, or NGEN environments
• Experience with SQL Server
• ITIL, Agile, Scrum, or SAFe experience/certification
• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field

Compensation for the IDAM Engineer includes:

• Salary: $95,000-$100,000 depending on experience
• Benefits: Medical, Dental, Vision, 401k Plan, Holidays, PTO, sick leave as required by law

Keywords:

Idam Engineer, Identity Engineer, Identity Management Engineer, Iam Engineer, Identity and Access Management, Identity Access Management, Identity Services Engineer, Active Directory Engineer, Active Directory Administrator, Microsoft Identity Engineer, Windows Systems Engineer, Systems Engineer, Infrastructure Engineer, Site Reliability Engineer, Sre, Devops Engineer, Active Directory, Ad, Group Policy, Gpo, Microsoft Identity Manager, Mim, Forefront Identity Manager, Fim, Adfs, Active Directory Federation Services, Delinea, Pki, Public Key Infrastructure, identity federation, authentication, authorization, DNS, DHCP, Wins, Windows Server, Windows Server 2016, Windows Server 2019, Windows Server 2022, Windows Server 2025, PowerShell, Python, Ansible, automation, infrastructure automation, Infrastructure as Code, IaC, Terraform, CloudFormation, Jenkins, GitLab, Ci-Cd, DevSecOps, Sre, Splunk, Azure, Aws, Kubernetes, OpenShift, Docker, cloud infrastructure, application integration, system reliability, performance testing, load testing, stress testing, resilience testing, monitoring, troubleshooting, production support, patching, Stig, Disa Stig, Iava, Rmf, Risk Management Framework, security hardening, cybersecurity compliance, DoD, DOD, Department of Defense, Navy, Navy Marine Corps Intranet, Nmci, Ngen, Secret clearance, active Secret, Security+, CompTIA Security+, DoD 8570, DoD 8140, Norfolk, Virginia, Va, San Diego, California, Ca, Honolulu, Hawaii, Hi, Pearl Harbor

#LI-SW1

#LI-ONSITE