IAM Engineer

Requirements:

• Ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD); active EOD is preferred
• Bachelors degree plus 8 years of applicable experience, or associate degree plus 10 years of applicable experience
• Experience in identity management and familiarity with identity management tools
• Strong knowledge of HSPD-12 and government smart card authentication
• Expert knowledge of authentication protocols and technologies, including SAML, OAuth, OpenID, WSO2, and Kerberos
• Experience delivering role-based access control (RBAC) solutions for cloud platforms such as Azure
• Strong scripting and automation skills, including PowerShell
• Understanding of Microsoft Azure PIM, Access Reviews, service principals, managed identities, and ABAC
• Strong knowledge of enterprise PKI integration using SCEP and ACME clients
• Experience preparing technical architecture documentation
• Strong written and verbal communication skills
• Preferred: ITIL v3 or v4 Foundation certification
• Preferred: Previous DHS or DoD experience
• Preferred: Microsoft Azure Fundamentals certification
• Preferred: CompTIA A+, Network+, or Security+ certification
• Preferred: Experience with Azure Cloud, scripting, and automation

Responsibilities:

• Help define, develop, and implement IAM solutions that reduce risk, improve resilience, and support business initiatives
• Implement IAM solutions for PIV/certificate-based authentication and FIDO
• Engineer and maintain a secure, robust enterprise access management solution, including operation and maintenance of the IdentityIQ platform
• Integrate IAM with business applications and third parties, including enabling single sign-on through SAML, OAuth, and OpenID Connect
• Work with customers to establish organizational structures, naming conventions, and user access roles
• Develop processes and workflows for IAM operations, including user onboarding, lifecycle management, and privileged access management
• Assist with integrating an enterprise PKI solution
• Advise business stakeholders on IAM best practices and provide technical guidance to program leadership and key stakeholders
• Define, improve, and support Azure Entra ID and privileged access management
• Identify opportunities to automate processes such as onboarding and offboarding, and improve existing workflows through scripting
• Collaborate with Azure, network, and security architecture teams to integrate and operate IAM services
• Coordinate with vendors to assess, test, and deploy new technology solutions
• Implement solutions designed by the IAM architect in alignment with organizational needs and standards

Technologies:

• Architect
• Azure
• Cloud
• IAM
• IdentityIQ
• Support
• ITIL
• Network
• OAuth
• OpenID
• PowerShell
• RBAC
• SAML
• Security
• DevOps

More

We are hiring a full-time, regular IAM Engineer to join CACIs high-performing team supporting a government customer. The role focuses on enterprise IAM services and solutions. No travel is required. We value integrity, innovation, trust, and employee contributions, and offer flexible time off, learning resources, competitive compensation, and benefits covering healthcare, wellness, finances, retirement, family support, continuing education, and time off. The proposed salary range is $98,500–$206,800; final compensation may vary based on location, contract requirements, experience, skills, education, and certifications. We are an equal opportunity employer.

last updated 43 week of 2026