Senior Identity & Access Architect – Zero Trust & PAM

Everforth, Inc.; Merrifield (VA); Hybrid; USD 130,000 - 180,000; Full time

Job summary

Everforth ECS seeks an Identity Infrastructure Engineer to own and protect the organization’s identity backbone in Fairfax, VA. The role focuses on Active Directory, EntraID, PKI, and secure lifecycle management for thousands of users and systems.

You will implement RBAC, enforce least privilege, and lead audits and access reviews within a hybrid work model. Strong IAM, Keycloak, and security knowledge are essential.

Qualifications

• HS Diploma plus 6+ years in Identity and Access Management in enterprise or federal environments.
• Active DoD 8140 IAT Level II Security+ or higher.
• SAA-C03 AWS Certified Solutions Architect – Associate.
• AZ-104 Azure Administrator – Associate or AZ-800 equivalent.

Responsibilities

• Design and implement RBAC across EntraID, AWS, NGINX, AppGate, and Keycloak.
• Enforce least privilege policies per Zero Trust principles.
• Validate access controls align with Zero Trust and security requirements.
• Develop identity lifecycle processes for joiners, movers, leavers.
• Implement and manage PAM programs and privileged account governance.
• Lead access reviews for PAR/RAR reporting and compliance.
• Map roles to privileges and definitions across programs.
• Collaborate with leadership to align IAM policies with changes.
• Support AppGate SDP Zero Trust Network Access deployments.
• Gather requirements and translate into access-control specifications.
• Assist senior engineers with identity-based access policies.
• Onboard users, endpoints, apps, and network resources into AppGate SDP.
• Produce IAM metrics and governance dashboards.
• Serve as IAM SME for audits and government engagements.

Skills

IAM

RBAC design

Zero Trust

Active Directory

Keycloak

EntraID

AWS IAM

PAM

PKI Lifecycle

Education

High School Diploma

Tools

AppGate SDP

EntraID

AWS IAM

Keycloak Admin

Job description

Everforth ECS seeks an Identity Infrastructure Engineer to own and protect the organization’s identity backbone in Fairfax, VA. The role focuses on Active Directory, EntraID, PKI, and secure lifecycle management for thousands of users and systems.

You will implement RBAC, enforce least privilege, and lead audits and access reviews within a hybrid work model. Strong IAM, Keycloak, and security knowledge are essential.