Staff Identity Security Engineer - IGA, PAM & ISPM

Okta; Washington (District of Columbia); On-site; USD 180,000 - 230,000; Full time

Job summary

United States Digital Space LLC in Washington, DC seeks a Staff Identity Security Engineer to own OIG, PAM/ISPM, and Zero Standing Privilege initiatives. You will shape architecture, mentor engineers, and drive production-grade solutions across Workday, IGA, and identity controls.

The role requires 4+ years of enterprise IGA/PAM experience, strong standards (SAML, OAuth, OIDC), and the ability to communicate risks and roadmaps to executives.

Qualifications

• Minimum 4+ years of direct, advanced experience managing and administering enterprise IGA, PAM/ISPM tools and platforms.
• Birthright provisioning models and RBAC architectures in production environments.
• Production experience with OPA or equivalent PAM tooling, including Zero Standing Privilege, JIT access, and break-glass design.
• Production experience with ISPM tools that integrate with EDR solutions like Crowdstrike Falcon.
• Solid grounding in identity standards (SAML, OIDC, OAuth 2.0, SCIM) and RBAC concepts.
• Track record of owning technical designs for identity lifecycle problems end-to-end, from design through production.

Responsibilities

• Own OIG architecture end-to-end — design access workflows, entitlement structures, and certification campaigns.
• Lead birthright provisioning and RBAC strategy across the enterprise.
• Drive Workday integration architecture with real-time sync and attribute sets for access rules.
• Design and harden mover/leaver automation and secure decommissioning of stale access.
• Lead OPA, ISPM, and Zero Standing Privilege initiatives including JIT, break-glass, and tiering models.
• Own PAM and ISPM telemetry and KPIs to monitor privilege reduction and remediation.
• Build and maintain Workflows automation to streamline access requests and approvals.
• Mentor engineers, review designs, and communicate updates to leadership.

Skills

OIG Architecture

RBAC Strategy

Workday Integration

PAM/ISPM

Zero Standing Privilege

Just-In-Time Access

Executive Communication

Autonomy

CrowdStrike Falcon

ServiceNow

JIRA

ISPM tooling

Tools

OPA

Crowdstrike Falcon

ServiceNow

JIRA

Workday

Job description

United States Digital Space LLC in Washington, DC seeks a Staff Identity Security Engineer to own OIG, PAM/ISPM, and Zero Standing Privilege initiatives. You will shape architecture, mentor engineers, and drive production-grade solutions across Workday, IGA, and identity controls.

The role requires 4+ years of enterprise IGA/PAM experience, strong standards (SAML, OAuth, OIDC), and the ability to communicate risks and roadmaps to executives.