Remote IAM Engineer — Zero Trust & Cloud Access Expert

SOSi; Town of Florida (NY); Remote; USD 120,000 - 180,000; Full time

Job summary

SOSi seeks an IAM Engineer to design, implement, and manage scalable identity and access management solutions across cloud and on-prem environments for a DoD customer. The role emphasizes Zero Trust and RBAC to secure mission-critical systems, with integration to Microsoft Entra ID, PKI, and CAC authentication.

Qualified candidates have SECRET clearance, a cybersecurity-related degree or equivalent experience, and hands-on work with IAM tools (Okta, Ping Identity, AWS IAM).

Qualifications

• Active in-scope SECRET clearance.
• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or related field.
• Five years of IAM engineering experience or equivalent.
• Experience designing and managing IAM in cloud (AWS/Azure) and on-prem environments.
• Knowledge of authentication protocols (SAML, OAuth, OpenID Connect) and RBAC/MFA.
• Experience with identity governance tools and RBAC across hybrid environments.
• Strong understanding of DoD IL2/IL4/IL5 security frameworks and compliance standards.
• Preferred certifications include CISSP, AWS Certified Security, or MS Identity Admin.

Responsibilities

• Design, implement, and manage IAM solutions across cloud and on-prem environments.
• Enforce Zero Trust Architecture and RBAC policies to protect critical systems.
• Integrate IAM with Microsoft Entra ID, PKI, and CAC authentication mechanisms.
• Oversee IAM automation, provisioning and de-provisioning of user roles and permissions.
• Submit IAM Compliance Report detailing configurations, logs, and status.

Skills

IAM design & management

Zero Trust Architecture

RBAC & MFA

Cloud IAM (AWS/Azure)

SAML/OIDC/OAuth

Identity governance tools

DoD IL2/IL4/IL5 compliance

Hybrid cloud/on-prem authentication

Education

Bachelor's degree in Cybersecurity/Info Assurance/CS

Tools

Microsoft Entra ID (Azure AD)

Okta

Ping Identity

AWS IAM

Job description

SOSi seeks an IAM Engineer to design, implement, and manage scalable identity and access management solutions across cloud and on-prem environments for a DoD customer. The role emphasizes Zero Trust and RBAC to secure mission-critical systems, with integration to Microsoft Entra ID, PKI, and CAC authentication.

Qualified candidates have SECRET clearance, a cybersecurity-related degree or equivalent experience, and hands-on work with IAM tools (Okta, Ping Identity, AWS IAM).