Senior IAM Engineer – Government Identity & Access

CACI International Inc; United States; Remote; USD 120,000 - 170,000; Full time

Job summary

CACI International Inc. seeks an IAM Engineer to maintain enterprise identity services for a government client. Focus on lifecycle, authentication, and privileged access, integrating controls across cloud, apps, and external services.

Role includes automation, scripting (PowerShell), and government smart card authentication with PIV/FIDO, plus SSO via SAML/OIDC. Collaboration with IAM architects and security teams is essential.

Qualifications

• Bachelor’s degree plus 8 years of applicable experience, or associate degree plus 10 years.
• Experience with identity management tools and government smart card authentication under HSPD-12.
• Strong knowledge of SAML, OAuth, OpenID, WSO2, and Kerberos authentication.
• Experience delivering cloud role-based access control, including Azure, and scripting automation such as PowerShell.
• Azure PIM, access reviews, service principals, managed identities, ABAC, and enterprise PKI integration using SCEP and ACME clients.

Responsibilities

• Build and maintain enterprise access management capabilities, including authentication with PIV or certificates and FIDO.
• Integrate applications and third parties with single sign-on using protocols such as SAML, OAuth, and OpenID Connect.
• Help define user roles, organizational structures, naming conventions, and workflows for onboarding, lifecycle management, and privileged access.
• Support Azure Entra ID, privileged access management, and enterprise PKI integration.
• Advise stakeholders on IAM practices; coordinate with cloud, network, security, and vendor teams to assess and deploy solutions.
• Identify opportunities to automate access processes with scripting and document technical architectures.

Skills

Identity management

SAML

OAuth

OpenID Connect

PowerShell scripting

Azure Entra ID

Privileged access management

Education

Bachelor's degree

Associate degree

Tools

WSO2

Kerberos

SCEP

ACME clients

Job description

CACI International Inc. seeks an IAM Engineer to maintain enterprise identity services for a government client. Focus on lifecycle, authentication, and privileged access, integrating controls across cloud, apps, and external services.

Role includes automation, scripting (PowerShell), and government smart card authentication with PIV/FIDO, plus SSO via SAML/OIDC. Collaboration with IAM architects and security teams is essential.