Identity Infrastructure Engineer — Zero Trust & PAM (Hybrid)

Socket.dev; Fairfax (VA); Hybrid; USD 130,000 - 180,000; Full time

Job summary

Everforth ECS in Fairfax, VA is seeking an Identity Infrastructure Engineer to own the health, integrity, and security of our identity backbone. You will administer Active Directory and PKI, ensuring reliable access and strong authentication across the enterprise.

In this senior role, you will design RBAC across EntraID, AWS, Keycloak, and AppGate SDP, enforce least privilege, and support audits and government engagements. Hybrid work in Fairfax is required.

Qualifications

• Minimum 6+ years Identity and Access Management experience in enterprise or federal environments.

Responsibilities

• Design and implement formal RBAC across EntraID, AWS, NGINX, AppGate, and Keycloak.
• Enforce least-privilege policies in line with Zero Trust and federal directives.
• Manage identity lifecycle (joiners, movers, leavers) and provisioning/deprovisioning.
• Lead PAM program and privileged account governance.
• Lead access reviews and PAR/RAR reporting.
• Develop role-to-privilege mappings and definitions across the program.
• Collaborate with leadership to ensure IAM policies align with organizational changes.
• Support AppGate SDP Zero Trust Network Access implementations and ongoing operations.
• Produce IAM metrics and dashboards for governance posture.
• Serve as IAM SME for audits and government engagements.
• Other duties as assigned.

Skills

RBAC design across EntraID AWS NGINX

Zero Trust Architecture

Identity and Access Management (IAM)

AppGate SDP

Keycloak Administration

Active Directory / directory services

PAM governance

Audits and compliance reporting

Education

High School Diploma, 6+ years IAM experience

DoD 8140 IAT II Security+ or higher

AWS Certified Solutions Architect – Associate (SAA-C03)

Azure Administrator – Associate or AZ-800

Tools

AppGate SDP

Microsoft EntraID (Azure AD)

AWS IAM

Keycloak

Job description

Everforth ECS in Fairfax, VA is seeking an Identity Infrastructure Engineer to own the health, integrity, and security of our identity backbone. You will administer Active Directory and PKI, ensuring reliable access and strong authentication across the enterprise.

In this senior role, you will design RBAC across EntraID, AWS, Keycloak, and AppGate SDP, enforce least privilege, and support audits and government engagements. Hybrid work in Fairfax is required.