Senior IdAM Engineer — SSO, IGA & PKI Expert

Amentum company; Colorado Springs (CO); On-site; USD 175,000 - 220,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a Senior IdAM Engineer to support the Next Generation Environment on the IRES contract. You will engineer, deploy, automate, secure, and sustain the IdAM/ICAM ecosystem underpinning the Missile Defense Agency’s digital environment across on-premises and cloud.

You will implement IGA workflows, SSO, directory integrations, PKI aligned with Zero Trust, and collaborate with government teams to ensure continuous, compliant identity services within DoD environments.

Responsibilities

• Implement, deploy, configure, and sustain SailPoint IdentityIQ (IIQ) solutions with O&M and onboarding.
• Design identity lifecycle workflows (joiner/mover/leaver), RBAC/ABAC, and compliance reporting.
• Engineer, deploy, and maintain PingFederate SSO across enterprise apps.
• Integrate Azure AD and AWS IAM in DoD IL5/IL6 boundaries.
• Configure AD DS/AD FS and manage Kerberos, LDAP/S, and trust configurations.
• Deploy DoD NSS PKI components including CAs and token integration.
• Enforce zero-trust policies per NIST SP 800-207 and DISA RMF requirements.
• Collaborate with multi-contractor teams for identity interfaces and integrations.
• Develop automation scripts (PowerShell, Bash, Python, Java) for provisioning.
• Create and maintain design docs, SOPs, and test plans.

Job description

Amentum is seeking a Senior IdAM Engineer to support the Next Generation Environment on the IRES contract. You will engineer, deploy, automate, secure, and sustain the IdAM/ICAM ecosystem underpinning the Missile Defense Agency’s digital environment across on-premises and cloud.

You will implement IGA workflows, SSO, directory integrations, PKI aligned with Zero Trust, and collaborate with government teams to ensure continuous, compliant identity services within DoD environments.