Job Title: IAM Engineer
Job Category: Engineering
Time Type: Full time
Minimum Clearance Required to Start: None
Employee Type: Regular
Percentage of Travel Required: None
Type of Travel: None
The Opportunity
CACI is seeking an experienced SailPoint IAM Engineer to join a dynamic, high-performing team responsible for operating and maintaining the Identity IQ platform for a government customer. In this role, the Identity and Access Management (IAM) engineer will provide technical guidance to the program manager and key stakeholders, specifically focusing on enterprise-scale projects and solutions. The IAM Engineer will play a critical role in implementing solutions designed by the IAM architect, ensuring that these solutions meet organizational needs and standards.
Responsibilities
As a key member of the team delivering next-generation IAM services, the engineer will assist in defining, developing, and implementing IAM solutions that reduce risk and enhance resiliency, while also supporting the acceleration of important business initiatives. Collaboration will be essential; the engineer will work closely with professionals in Microsoft Azure, network, and security architecture to ensure seamless integration and operation of IAM services. Additionally, the engineer will coordinate with vendors to evaluate, test, and deploy new technology solutions as needed.
- Implement IAM solutions to support PIV/Certificate Base Authentication, FIDO
- Engineer and maintain a secure and robust enterprise access management solution
- Facilitate and support IAM integration into business applications and third parties, including Single Sign On enablement using modern protocols (SAML, OAuth, Open ID Connect)
- Collaborate with customers to define organization constructs/naming conventions and user access roles
- Assist with the development of process and workflows to support IAM operation activities such as user onboarding, user lifecycle management and privilege access management
- Provide assistance with the integration of an Enterprise PKI solution.
- Engage with, and advise stakeholders within the business on Identity and Access Management best practices
- Define, improve, and support Azure Entra ID and Privileged Access Management within the organization
- Identify areas for delivery of automated solutions (e.g. onboarding/offboarding) and maturation of existing processes by leveraging scripting
Show the full description
Qualifications
Required
- Ability to obtain Department of Homeland Security (DHS) Entry On Duty (EOD) - Active EOD preferred
- BA/BS + 8 years of applicable experience; AA + 10 years’ applicable experience
- Experience in the Identity space with a background in identity management tools
- Strong knowledge of HSPD12 and implementation of government smart card authentication
- Expert knowledge of authentication with SAML, OAuth, OpenID, WSO2, and Kerberos
- Prior experience in providing RBAC solutions for clouds solutions (e.g. Azure)
- Strong scripting and automation abilities including PowerShell
- Understanding of Microsoft Azure PIM, Access Reviews, Service Principles, Managed Identities and ABAC
- Strong knowledge of enterprise PKI integration with SCEP and ACME clients
- Experience in creating technical architecture documentation
- Strong communication and written skills.
Desired
