Senior Identity & Access Engineer - Zero Trust

ECS Corporate Services; Fairfax (VA); Hybrid; USD 130,000 - 180,000; Full time

Benefits offered by this job

DoD Secret clearance

Hybrid work in Fairfax

IAM metrics reporting

Job summary

Everforth ECS in Fairfax, VA is seeking an Identity Infrastructure Engineer to join a hybrid team responsible for the organization's directory and identity management. This role emphasizes securing the identity backbone, including Active Directory and PKI, across EntraID, AWS, Keycloak, and AppGate SDP.

The ideal candidate has hands-on experience in RBAC, Zero Trust, and privileged access governance, with a DoD Secret clearance and strong collaboration across teams.

Qualifications

• Active DoD Secret clearance required.
• 6+ years in Identity and Access Management in complex enterprises.
• Hybrid work in Fairfax, VA (up to 3 days in office).

Responsibilities

• Design and implement formal RBAC across EntraID, AWS, NGINX, AppGate and Keycloak.
• Enforce least-privilege policies in line with Zero Trust and federal directives.
• Manage identity lifecycle for joiners, movers and leavers.
• Lead PAM program governance and access reviews for compliance.

Skills

RBAC design

Zero Trust Architecture

Active Directory

PKI / certificate lifecycle

Tools

AppGate SDP

Keycloak

AWS IAM

Job description

Everforth ECS in Fairfax, VA is seeking an Identity Infrastructure Engineer to join a hybrid team responsible for the organization's directory and identity management. This role emphasizes securing the identity backbone, including Active Directory and PKI, across EntraID, AWS, Keycloak, and AppGate SDP.

The ideal candidate has hands-on experience in RBAC, Zero Trust, and privileged access governance, with a DoD Secret clearance and strong collaboration across teams.