Senior IAM Architect: SailPoint & Enterprise Security

CACI International Inc; Vienna (VA); On-site; USD 132,000 - 290,000; Full time

Job summary

CAC I International Inc. seeks an IAM Architect to lead the design and implementation of enterprise IAM solutions, focusing on identity and access management across Azure and government-grade platforms.

The role involves coordinating with Azure, security, and network teams to deliver secure identity services and automate processes. You will guide IAM engineering teams, define solutions to reduce risk, and help accelerate business initiatives while ensuring robust PKI, SSO, and RBAC

Qualifications

• BA/BS in a related field with 10+ years of exp or AA with 15+ years of exp
• Experience in identity management tools and technologies
• Strong knowledge of government smart card authentication (HSPD-12)
• Expert knowledge of SAML, OAuth, OpenID Connect, WSO2, Kerberos
• RBAC solutions for cloud environments (Azure)
• PowerShell scripting and automation
• Azure PIM, Access Reviews, Service Principals, Managed Identities, ABAC
• Enterprise PKI integration (SCEP/ACME)
• Experience creating architecture documentation
• Strong communication and written skills

Responsibilities

• Design IAM solutions for authentication methods (PIV/Certificate Base, FIDO2)
• Lead IAM integration with business apps and SSO (SAML/OAuth/OpenID)
• Define org constructs, naming, and user access roles
• Develop processes/workflows for onboarding, lifecycle, and privileged access
• Advise stakeholders on IAM best practices
• Define and improve Azure Entra ID, certificate lifecycle, and PAM
• Identify opportunities for automated onboarding/offboarding

Skills

Identity management

HSPD-12

SAML

OAuth

OpenID Connect

WSO2

Kerberos

RBAC (Azure)

PowerShell

Azure PIM

Access Reviews

Service Principals

Managed Identities

ABAC

PKI integration (SCEP/ACME)

Technical architecture docs

Communication/written skills

Education

BA/BS + 10 years applicable experience

AA + 15 years applicable experience

Tools

Microsoft Azure

WSO2

SCEP

ACME clients

Job description

CAC I International Inc. seeks an IAM Architect to lead the design and implementation of enterprise IAM solutions, focusing on identity and access management across Azure and government-grade platforms.

The role involves coordinating with Azure, security, and network teams to deliver secure identity services and automate processes. You will guide IAM engineering teams, define solutions to reduce risk, and help accelerate business initiatives while ensuring robust PKI, SSO, and RBAC