Security Systems Engineer (Need Local to McLean, VA)

Noblesoft Solutions, Inc.; McLean (VA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Noblesoft Solutions, Inc. is seeking an experienced IAM engineer for a hybrid role based in McLean, VA with optional travel to Dallas, TX or Memphis, TN.

The candidate will help design, implement, and manage identity and access services across complex enterprise environments, including non-human identities and cloud delivery models. The role requires strong expertise in IAM, platform engineering, and integration across SailPoint, PingIdentity, Microsoft Entra/AD, and related tools, with hands-on

Qualifications

• 10+ years of IAM engineering, platform engineering, or identity integration experience in complex enterprise environments.
• Experience implementing controls for non-human identities such as AI agents, service accounts, machine accounts, service principals, OAuth clients, and workload identities.
• Experience implementing or transitioning identity services to SaaS and cloud delivery models.
• Hands-on experience with privileged access management platforms such as HashiCorp Vault and OneIdentity Safeguard is preferred.
• Experience with CI/CD pipelines, infrastructure as code, automated testing, and Git-based workflows is preferred.
• Strong working knowledge of SailPoint IdentityIQ, PingFederate, PingDirectory, Microsoft Entra, and Microsoft Active Directory.
• Familiarity with ServiceNow, Datadog, and Splunk for support, monitoring, and observability.
• Proven ability to design, implement, and debug identity lifecycle, authentication, federation, authorization, directory, and provisioning solutions.

Job description

This is a Hybrid position in McLean, VA/Dallas, TX or Memphis, TN 2-3 days/week

• 10 + years of IAM engineering, platform engineering, or identity integration experience in complex enterprise environments.
• Demonstrated experience implementing controls for non-human identities such as AI agents, service accounts, machine accounts, service principals, OAuth clients, and workload identities.
• Experience implementing or transitioning identity services to SaaS and cloud delivery models.
• Hands-on experience with privileged access management platforms such as HashiCorp Vault and OneIdentity Safeguard is preferred.
• Experience with CI/CD pipelines, infrastructure as code, automated testing, and Git-based workflows is preferred.
• Deep expertise in IAM engineering, platform engineering, and identity integration within complex enterprise environments.
• Proficiency in implementing controls for non-human identities, including AI agents, service accounts, machine accounts, service principals, OAuth clients, workload identities, and associated credentials and certificates.
• Strong working knowledge of traditional workforce identity platforms, including SailPoint IdentityIQ, PingFederate, PingDirectory, Microsoft Entra, and Microsoft Active Directory.
• Familiarity with support, monitoring, and observability platforms such as ServiceNow, Datadog, and Splunk.
• Proven ability to design, implement, and debug identity lifecycle, authentication, federation, authorization, directory, and provisioning solutions.
• Experience building APIs, connectors, scripts, and automation for operational processing, monitoring, and audit or compliance use cases.
• Working knowledge of HRIS integrations, identity data models, SQL, ETL or data pipelines, logging, and reconciliation controls.
• Strong troubleshooting, documentation, communication, and cross-functional delivery skills.
• Hands-on experience with SailPoint Identity Security Cloud, Agentic Fabric, Entro, Ping Agent IAM Core, PingAuthorize, API or MCP gateways, or comparable non-human identity platforms is preferred.
• Experience with privileged access management platforms such as HashiCorp Vault and OneIdentity Safeguard is preferred.
• Experience with CI/CD, infrastructure as code, automated testing, Git-based workflows, and production support practices is preferred.

Certifications

- Relevant SailPoint certifications are preferred.

- Relevant Ping Identity certifications are preferred.

- Relevant Microsoft certifications are preferred.

- Relevant cloud platform certifications are preferred.

- Relevant security certifications are preferred.