[Hiring] Identity & Access Management (IAM) Engineer @DecisionPoint | Cortek

Role Description

DecisionPoint seeks an Identity & Access Management (IAM) Engineer to support enterprise identity operations and authentication services for a large federal and DoD-aligned mission environment. This role manages identity governance, access control enforcement, single sign-on (SSO) integrations, and multi-factor authentication (MFA) capabilities across cloud and on-premise environments. The IAM Engineer will contribute directly to the implementation of the Zero Trust identity pillar, ensuring secure, reliable, and policy-driven access to mission-critical systems. This position is fully remote.

Duties & Responsibilities

• Manage SSO integrations across enterprise applications and services.
• Configure and maintain identity governance workflows, account lifecycle management, and access approval processes.
• Implement and manage MFA, conditional access policies, and identity verification mechanisms.
• Support development and enforcement of identity-based access controls aligned with Zero Trust principles.
• Configure IAM roles, permissions, and policies in cloud environments, including AWS IAM.
• Conduct access reviews, entitlement audits, and privileged access assessments.
• Partner with cybersecurity teams to align identity controls with DoD security and compliance requirements.
• Troubleshoot identity issues related to SSO, MFA, directory services, and authentication flows.
• Assist with identity roadmap planning, modernization activities, and capability enhancements.
• Maintain identity standards, configuration documentation, and architectural artifacts.
• Support incident response activities related to identity threats or compromised accounts.
• Contribute to the development and refinement of IAM procedures, playbooks, and governance models.

Qualifications

• Must hold an active Top Secret clearance, supported by a Tier 5 background investigation.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Minimum 6 years of experience in identity and access management, authentication engineering, or IAM operations.
• Experience implementing or supporting SSO integrations, MFA configurations, or identity governance processes.
• Experience managing IAM roles, policies, and permissions in cloud environments (AWS preferred).
• Experience conducting access reviews, entitlement audits, or privilege management activities.
• Experience supporting the implementation of identity-focused security controls.

Technical Knowledge

• Strong understanding of IAM concepts, including authentication, authorization, federation, and identity governance.
• Experience with SSO technologies, MFA systems, and identity providers.
• Proficiency in AWS IAM roles, policies, access keys, and permission boundaries.
• Knowledge of Zero Trust identity principles and identity-centric access control models.
• Understanding of DoD cybersecurity requirements related to identity and access management.

Technical Knowledge (Preferred)

• Experience with directory services (e.g., Active Directory, Azure AD).
• Familiarity with identity risk scoring, behavioral analytics, or conditional access signals.
• Experience integrating IAM with CI/CD pipelines or DevSecOps workflows.

Certifications

• Required: Security+
• Preferred: AWS IAM or AWS Security specialty certification
• Additional DoD 8570/8140 IAM-related certifications

Skills

• Strong problem-solving abilities for diagnosing authentication and access issues.
• Excellent communication skills for collaborating with cybersecurity, engineering, and application teams.
• High attention to detail for managing access controls, policies, and identity workflows.
• Ability to manage multiple IAM initiatives in a fast-paced, mission-critical environment.
• Strong documentation skills for maintaining identity policies, standards, and technical procedures.