SailPoint IAM Engineer — Azure & SSO Expert

CACI International; Town of Vienna (WI); On-site; USD 113,000 - 238,000; Full time

Job summary

CACI International is seeking an experienced SailPoint IAM Engineer to join a dynamic team responsible for operating and maintaining the Identity IQ platform for a government customer. The IAM Engineer will provide technical guidance and focus on enterprise-scale projects.

The role involves implementing IAM solutions with SSO (SAML, OAuth, OpenID Connect), Azure Entra ID, and PKI integration, collaborating with Azure, network, and security teams to ensure secure access management.

Qualifications

• Experience in identity management with government-grade IAM solutions.
• Proficiency with SAML, OAuth, OpenID Connect.
• Experience with Azure RBAC and PIM.
• Strong scripting and automation abilities, including PowerShell.
• Excellent communication skills, written and verbal.

Responsibilities

• Define, develop, and implement IAM solutions to reduce risk and enhance resiliency.
• Collaborate with Azure, network, and security architecture teams to ensure seamless IAM integration.
• Coordinate with vendors to evaluate, test, and deploy new technology solutions.
• Implement IAM to support PIV/Certificate Based Authentication, FIDO.
• Engineer and maintain a secure enterprise access management solution.
• Enable Single Sign-On using SAML, OAuth, OpenID Connect.
• Define naming conventions and user access roles with stakeholders.
• Develop processes for onboarding, lifecycle management and privileged access.

Skills

Identity management

RBAC solutions

Scripting & automation

PowerShell

Azure Entra ID

SSO protocols

Communication skills

PKI integration

Education

BA/BS in related field

Associate degree

Tools

WSO2

Azure PIM

ACME clients

SCEP

Managed Identities

Job description

CACI International is seeking an experienced SailPoint IAM Engineer to join a dynamic team responsible for operating and maintaining the Identity IQ platform for a government customer. The IAM Engineer will provide technical guidance and focus on enterprise-scale projects.

The role involves implementing IAM solutions with SSO (SAML, OAuth, OpenID Connect), Azure Entra ID, and PKI integration, collaborating with Azure, network, and security teams to ensure secure access management.