Senior IAM Architect - Identity & Access Strategy

CACI International; United States; Remote; USD 115,000 - 252,000; Full time

Job summary

CACI International is seeking an IAM Architect to lead design and integration of enterprise IAM solutions for a government-focused program. You will guide IAM engineers, define secure authentication strategies, and collaborate with Azure, network and security teams to deliver resilient identity services.

The role emphasizes PIV/cert-based authentication, SSO via SAML/OAuth/OpenID, and automation through PowerShell, with a focus on risk reduction and business enablement across platforms.

Qualifications

• BA/BS + 10 years of applicable experience
• AA + 15 years’ applicable experience
• Experience in the Identity space with identity management tools
• Strong knowledge of HSPD12 and government smart card authentication
• Expert knowledge of authentication with SAML, OAuth, OpenID, WSO2, Kerberos
• RBAC solutions for cloud environments (Azure)
• PowerShell scripting and automation
• Understanding of Microsoft Azure PIM, Access Reviews, Service Principles, Managed Identities and ABAC
• Enterprise PKI integration with SCEP and ACME
• Experience creating technical architecture documentation
• Strong communication and written skills

Responsibilities

• Design IAM solutions to support PIV/Certificate Base Authentication, FIDO 2
• Enable and support SSO using SAML, OAuth, OpenID Connect
• Collaborate with stakeholders to define user access roles and naming conventions
• Develop processes for onboarding, lifecycle management, and privilege access
• Advise on IAM best practices across the organization
• Define and improve Azure Entra ID, certificate lifecycle and privileged access management
• Identify opportunities for automated onboarding/offboarding and process maturation

Education

BA/BS + 10 years experience

AA + 15 years experience

Tools

SAML

OAuth

OpenID Connect

PowerShell

Azure

Kerberos

PKI

Job description

CACI International is seeking an IAM Architect to lead design and integration of enterprise IAM solutions for a government-focused program. You will guide IAM engineers, define secure authentication strategies, and collaborate with Azure, network and security teams to deliver resilient identity services.

The role emphasizes PIV/cert-based authentication, SSO via SAML/OAuth/OpenID, and automation through PowerShell, with a focus on risk reduction and business enablement across platforms.