Senior Cloud PKI & IAM Systems Engineer (Hybrid)

GovCIO; Alexandria (VA); Hybrid; USD 135,000 - 172,000; Full time

Job summary

GovCIO is seeking a highly experienced SME Systems Engineer specializing in Credential Management with a primary focus on Cloud Credential & PKI to support USCG ICAM modernization. The role will design, engineer, and implement secure identity-centric access controls across legacy and modern enterprise architectures.

Hybrid work arrangement in Alexandria, VA. Responsibilities include leading modernization of legacy access controls, managing directories, federation, authentication, SSO, PKI, MFA,

Qualifications

• DoD 8570 IAT Level II or higher required.
• Deep understanding of federated identity concepts (SAML, OAuth, OIDC, LDAP/AD).
• Hands-on PKI certificate validation and CAC authentication experience.
• Experience applying federal Zero Trust identity guidelines (NIST 800-207).

Responsibilities

• Lead modernization of legacy access controls into secure ICAM solutions.
• Manage directories, federation, authentication, authorization, and SSO protocols.
• Architect identity lifecycles, provisioning workflows, and privilege controls.
• Design and deploy Zero Trust identity across networks per NIST 800-207.
• Configure and manage PKI systems, credentials, and authenticators.
• Implement MFA, SSO, and PAM for access control.
• Develop federated identity services for partner interoperability.
• Conduct root cause analyses, privilege audits, and performance tuning.
• Provide advanced engineering ownership across CM/PKI specialization.

Skills

DoD 8570 IAT Level II

Federated identity concepts

Smart Card / CAC PKI

Zero Trust (NIST 800-207)

Education

High School with 10+ years experience

Tools

SailPoint

Okta

Microsoft Entra ID

Ping Identity

DigiCert

Power BI

Job description

GovCIO is seeking a highly experienced SME Systems Engineer specializing in Credential Management with a primary focus on Cloud Credential & PKI to support USCG ICAM modernization. The role will design, engineer, and implement secure identity-centric access controls across legacy and modern enterprise architectures.

Hybrid work arrangement in Alexandria, VA. Responsibilities include leading modernization of legacy access controls, managing directories, federation, authentication, SSO, PKI, MFA,