[Hiring] IAM Engineer @CACI International

Role Description

CACI is seeking an experienced SailPoint IAM Engineer to join a dynamic, high-performing team responsible for operating and maintaining the Identity IQ platform for a government customer. In this role, the Identity and Access Management (IAM) engineer will provide technical guidance to the program manager and key stakeholders, specifically focusing on enterprise-scale projects and solutions. The IAM Engineer will play a critical role in implementing solutions designed by the IAM architect, ensuring that these solutions meet organizational needs and standards.

• Implement IAM solutions to support PIV/Certificate Base Authentication, FIDO
• Engineer and maintain a secure and robust enterprise access management solution
• Facilitate and support IAM integration into business applications and third parties, including Single Sign On enablement using modern protocols (SAML, OAuth, Open ID Connect)
• Collaborate with customers to define organization constructs/naming conventions and user access roles
• Assist with the development of process and workflows to support IAM operation activities such as user onboarding, user lifecycle management and privilege access management
• Provide assistance with the integration of an Enterprise PKI solution
• Engage with, and advise stakeholders within the business on Identity and Access Management best practices
• Define, improve, and support Azure Entra ID and Privileged Access Management within the organization
• Identify areas for delivery of automated solutions (e.g. onboarding/offboarding) and maturation of existing processes by leveraging scripting

Qualifications

• Ability to obtain Department of Homeland Security (DHS) Entry On Duty (EOD) - Active EOD preferred
• BA/BS + 8 years of applicable experience; AA + 10 years’ applicable experience
• Experience in the Identity space with a background in identity management tools
• Strong knowledge of HSPD12 and implementation of government smart card authentication
• Expert knowledge of authentication with SAML, OAuth, OpenID, WSO2, and Kerberos
• Prior experience in providing RBAC solutions for clouds solutions (e.g. Azure)
• Strong scripting and automation abilities including PowerShell
• Understanding of Microsoft Azure PIM, Access Reviews, Service Principles, Managed Identities and ABAC
• Strong knowledge of enterprise PKI integration with SCEP and ACME clients
• Experience in creating technical architecture documentation
• Strong communication and written skills

Requirements

• ITILv3 or v4 Foundation’s certification
• Previous DHS or DoD experience
• Microsoft Azure Fundamentals
• CompTIA A+, or Network+, or Security+
• Experience with Azure Cloud, scripting, and automation

Benefits

• A culture of integrity.
• An environment of trust.
• A focus on continuous growth.
• Comprehensive benefits such as healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

Company Description

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.