[Hiring] Cloud Identity & Access Management - SOCEUR @CACI International

Role Description

As a CACI Cloud Identity & Access Management (IAM) Engineer, you will architect, build, and maintain the highly available authorization infrastructure for the Special Operations Command Europe (SOCEUR) Hybrid Threat Action Platform (HTAP) ecosystem on Google Cloud Platform (GCP). This role is responsible for:

• Designing the core identity federation, access policies, and security boundaries that protect mission-critical data.
• Architecting distributed authorization systems and brokering identities between unclassified and classified environments.
• Implementing a zero-trust security model.
• Interacting regularly with cybersecurity architects, application developers, and platform engineers to ensure secure, auditable, and least-privilege access across all systems.

Responsibilities include:

• Architecting and scaling large-scale, distributed cloud-native authorization services on GCP to support massive query loads and enforce granular access control.
• Leading the design and implementation of identity federation between on-premises/external identity providers and Google Cloud Identity, using protocols like SAML and OIDC.
• Integrating and managing identity platforms such as Keycloak with Google Workspace to implement strict Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA), including CAC/PIV integration.
• Designing, managing, and auditing IAM policies, roles, and bindings as code using Terraform to ensure an automated, repeatable, and secure identity lifecycle.
• Engineering and enforcing access control strategies for multi-level security environments, managing identity and access across different security domains (e.g., Unclassified to Secret).
• Developing and implementing context-aware access policies and zero-trust principles to protect sensitive data and APIs.
• Conducting regular security assessments and audits of IAM policies, access permissions, and service account usage to identify and remediate risks.
• Collaborating with the security operations team to provide IAM-specific context during incident response and threat analysis.

Qualifications

• Must be a US Citizen possessing an active TS/SCI security clearance.
• Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent practical experience).
• 5+ years of experience in backend software engineering or security engineering, with at least 3+ years specifically focused on designing and implementing Identity and Access Management (IAM) systems on a major cloud platform (GCP preferred).
• Deep expertise in identity federation protocols (SAML, OAuth, OIDC) and experience integrating with identity providers (e.g., Keycloak, Azure AD, Okta).
• Hands-on experience with Google Cloud IAM, Google Cloud Identity, and Google Workspace, including service accounts, workload identity, and organization policies.
• Experience with Infrastructure as Code (IaC), specifically using Terraform to manage IAM resources.
• Strong proficiency in a language like Python, Go, or C++ for building scalable backend systems.
• Experience with Public Key Infrastructure (PKI) and integrating smart card authentication (CAC/PIV).
• Google Cloud Professional Cloud Security Engineer certification.
• One of the following advanced security or identity certifications: CISSP, CCSP, or Certified Identity and Access Manager (CIAM).

Requirements

• Google Workspace Professional Collaboration Engineer certification (desired).
• Experience using AI-assisted tools for secure software development and debugging (desired).
• Experience working in a high-availability, low-latency distributed services environment (desired).

Benefits

• A culture of integrity.
• An environment of trust with flexible time off benefits.
• Access to robust learning resources.
• A focus on continuous growth and opportunities to advance your career.
• Comprehensive benefits such as healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

Pay Range

The proposed salary range for this position is: $105,100-$231,100. Factors influencing final salary include geographic location, Federal Government contract labor categories, relevant prior work experience, specific skills and competencies, education, and certifications.

Company Description

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.