Senior IAM & Identity Infra Engineer - Zero Trust

Insight Global (United States); Fairfax (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Insight Global is seeking an experienced Identity Infrastructure Engineer to manage and secure the organization’s directory and identity backbone across DoW environments. You will own AD, PKI, and certificate lifecycle operations while ensuring reliable, documented, and hardened identity services for thousands of users and systems.

The role demands hands-on leadership, clear cross-team communication, and a focus on security as a core control.

Qualifications

• Active Secret security clearance.
• 6+ years Identity and Access Management in a complex enterprise or federal environment.
• Security+CE (or equivalent IAT II certification).
• AWS Certified Solutions Architect – Associate.
• AZ-104 Azure Administrator – Associate OR Exam AZ-800: Administering Windows Server Hybrid Core Infrastructure.
• Experience with Okta.
• Working knowledge of AppGate SDP architecture, components, policies, entitlements and conditions.
• Understanding of Zero Trust Network Access, least-privilege access and identity-based security principles.
• Knowledge of TCP/IP, DNS, routing, firewalls, ports and common network troubleshooting methods.
• Familiarity with identity and access-management technologies, including SAML, OpenID Connect, LDAP, Active Directory, Keycloak, and multifactor authentication.

Responsibilities

• Design and implement a formal RBAC framework across environments incl. EntraID, AWS, NGINX, AppGate, and Keycloak.
• Establish and enforce least privilege policies per Zero Trust Architecture and federal directives.
• Validate access controls align with security requirements and Zero Trust.
• Develop identity lifecycle processes for joiners, movers, leavers with timely provisioning/deprovisioning.
• Lead PAM program including governance and monitoring of privileged accounts.
• Lead access review and audit processes for PAR/RAR reporting and compliance.
• Maintain role-to-privilege mappings and job definitions to avoid access ambiguity.
• Collaborate with program leadership to align IAM policies with org changes.

Skills

RBAC design

Zero Trust Architecture

Identity governance

Privileged Access Management

SAML/OpenID Connect

Directory services (Active Directory)

Security policies & compliance

Education

High School Diploma

Security+CE

AWS Certified Solutions Architect – Associate

AZ-104 Azure Administrator – Associate

AZ-800 Administering Windows Server Hybrid Core Infrastructure

SC-300

AWS Certified Cloud Practitioner

CISSP

CISM

Tools

Okta

Keycloak

AppGate SDP

EntraID / Azure AD

AWS IAM

Active Directory

Job description

Insight Global is seeking an experienced Identity Infrastructure Engineer to manage and secure the organization’s directory and identity backbone across DoW environments. You will own AD, PKI, and certificate lifecycle operations while ensuring reliable, documented, and hardened identity services for thousands of users and systems.

The role demands hands-on leadership, clear cross-team communication, and a focus on security as a core control.