Senior IAM Architect — SSO, Azure Entra ID & PKI

CACI International Inc.; Vienna (VA); On-site; USD 132,000 - 290,000; Full time

Job summary

CACI International Inc. seeks a SailPoint IAM Architect to lead enterprise IAM design for a government customer, focusing on IdentityIQ platform operations and next-generation IAM services.

You will collaborate with Azure, network and security teams, provide technical leadership, and help define RBAC, SAML/OAuth/OpenID Connect integrations, and automated onboarding/offboarding processes.

Qualifications

• BA/BS + 10 years of applicable experience; AA + 15 years’ applicable experience
• Experience in the Identity space with a background in identity management tools
• Strong knowledge of HSPD12 and implementation of government smart card authentication
• Expert knowledge of authentication with SAML, OAuth, OpenID, WSO2, and Kerberos
• Prior experience in providing RBAC solutions for clouds solutions (e.g. Azure)
• Strong scripting and automation abilities including PowerShell
• Understanding of Microsoft Azure PIM, Access Reviews, Service Principles, Managed Identities and ABAC
• Strong knowledge of enterprise PKI integration with SCEP and ACME clients
• Experience in creating technical architecture documentation
• Strong communication and written skills

Responsibilities

• Design IAM solutions to support PIV/Certificate Base Authentication, FIDO 2
• Facilitate and support IAM integration into business applications and third parties, including Single Sign On enablement using modern protocols (SAML, OAuth, Open ID Connect)
• Collaborate with customers to define organization constructs/naming conventions and user access roles
• Provide guidance with the development of process and workflows to support IAM operation activities such as user onboarding, user lifecycle management and privilege access management
• Engage with, and advise stakeholders within the business on Identity and Access Management best practices
• Define, improve, and support Azure Entra ID, Certificate Lifecycle Management and Privileged Access Management within the organization
• Identify areas for delivery of automated solutions (e.g. onboarding/offboarding) and maturation of existing process

Skills

Identity governance

RBAC

Azure AD

PowerShell

PKI

SAML

OAuth

OpenID Connect

Education

BA/BS in IT or related field

AA + 15 years’ applicable experience

Tools

WSO2 Identity Server

Azure Active Directory

SCEP

ACME clients

Job description

CACI International Inc. seeks a SailPoint IAM Architect to lead enterprise IAM design for a government customer, focusing on IdentityIQ platform operations and next-generation IAM services.

You will collaborate with Azure, network and security teams, provide technical leadership, and help define RBAC, SAML/OAuth/OpenID Connect integrations, and automated onboarding/offboarding processes.