Zero-Trust IAM Engineer for DoD ICAM & PAM

Barbaricum; Tampa (FL); On-site; USD 130,000 - 180,000; Full time

Job summary

Barbaricum seeks a System Information Assurance and Security Engineer to support USSOCOM ICAM implementation and migration as part of the Zero Trust program. You will help design, install, test, and govern enterprise identity solutions foundational to a DoD‑compliant security model.

The role requires hands‑on work with SAML, OAuth2.0, OpenID Connect, PKI, and certificate management, plus experience with Radiant Logic, Okta, Ping Identity, SailPoint, and ForgeRock.

Qualifications

• Active DoD TS/SCI clearance required.
• Bachelor’s degree in a related field; Master’s preferred.
• 5+ years of IAM architecture experience.

Responsibilities

• Execute identity and access management solutions for Zero Trust across enterprise systems.
• Design and maintain an IAM strategy aligned with DoD Zero Trust principles and RMF.
• Lead integration of federated identity, SSO, and MFA across cloud and on‑prem environments.
• Develop policies and reference architectures to enforce least privilege and ABAC.
• Implement PAM and Identity Governance solutions.
• Collaborate with cybersecurity, network, and cloud teams to align ICAM with Zero Trust pillars.
• Ensure compliance with DoD 8140/8570, RMF, FedRAMP, and related frameworks.
• Lead POCs and technology evaluations for emerging identity solutions.

Skills

Zero Trust frameworks

Identity and access management

DoD cybersecurity standards

SAML

OAuth2.0

OpenID Connect

PKI

Certificate management

TS/SCI clearance

Education

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field

Master’s degree preferred

Tools

Radiant Logic

Okta

Ping Identity

SailPoint

ForgeRock

Microsoft Entra ID (Azure AD)

Job description

Barbaricum seeks a System Information Assurance and Security Engineer to support USSOCOM ICAM implementation and migration as part of the Zero Trust program. You will help design, install, test, and govern enterprise identity solutions foundational to a DoD‑compliant security model.

The role requires hands‑on work with SAML, OAuth2.0, OpenID Connect, PKI, and certificate management, plus experience with Radiant Logic, Okta, Ping Identity, SailPoint, and ForgeRock.