Identity Infrastructure Engineer - Zero Trust & PAM (Hybrid)

ecsfederal; Virginia (MN); Hybrid; USD 130,000 - 180,000; Full time

Job summary

Everforth ECS seeks an Identity Infrastructure Engineer to join our Fairfax, VA team in a hybrid capacity. You will own the health, integrity, and security of the organization’s identity infrastructure, including Active Directory, PKI, and certificate lifecycle management.

You will design and enforce least-privilege access across EntraID, AWS, and AppGate, lead access reviews, and drive PAM governance while collaborating with system owners and program leadership to meet federal IAM requirements.

Qualifications

• U.S. Citizen required.
• Active DoD Secret security clearance required.
• High School Diploma and 6+ years of IAM experience in complex federal environments.
• DoD 8140 IAT Level II Security+ or higher required.
• AWS Certified Solutions Architect – Associate (SAA-C03) required.
• Azure Administrator – Associate or AZ-800 required.

Responsibilities

• Design and implement a formal RBAC framework across EntraID, AWS, NGINX, AppGate, and Keycloak.
• Establish and enforce least-privilege policies per Zero Trust and federal directives.
• Validate access controls align with Zero Trust and security requirements.
• Develop identity lifecycle processes for joiners, movers, and leavers.
• Implement and manage a PAM program including privileged account governance.
• Lead access reviews, PAR/RAR reporting, and compliance activities.
• Maintain role-to-privilege mappings and job function definitions.
• Collaborate with leadership to align IAM policies with organizational changes.
• Support AppGate SDP Zero Trust Network Access deployment and operations.
• Document identity architecture and authentication flows.

Skills

RBAC design

Zero Trust

Active Directory

EntraID

AWS IAM

Keycloak

PAM

AppGate SDP

Identity governance

Education

High School Diploma

Tools

AppGate SDP

Keycloak Admin Console

Azure AD / EntraID

AWS IAM

Job description

Everforth ECS seeks an Identity Infrastructure Engineer to join our Fairfax, VA team in a hybrid capacity. You will own the health, integrity, and security of the organization’s identity infrastructure, including Active Directory, PKI, and certificate lifecycle management.

You will design and enforce least-privilege access across EntraID, AWS, and AppGate, lead access reviews, and drive PAM governance while collaborating with system owners and program leadership to meet federal IAM requirements.