Identity and Access Management Engineer (Cybersecurity)

130 000 - 180 000$

Формат работы

hybrid

Тип работы

fulltime

Грейд

senior

Английский

Страна

Вакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:

TL;DR

Identity and Access Management Engineer (Cybersecurity): Designing and operating identity infrastructure, RBAC, PAM, directory services, and Zero Trust access controls across federal network enclaves with an accent on Microsoft Entra, AWS IAM, Keycloak, AppGate SDP, and compliance. Focus on implementing least-privilege policies, managing identity lifecycles and privileged accounts, conducting access reviews, and securing authentication and authorization for thousands of users and systems.

Location: Fairfax, Virginia, United States; hybrid work with up to three days in the office.

Salary: $130,000–$180,000 per year

Company

hirify.global is the federal segment of Everforth, delivering technology solutions in data and AI, cybersecurity, and enterprise transformation for defense, intelligence, and federal civilian agencies.

What you will do

Design and implement RBAC, least-privilege, and Zero Trust access controls across Entra ID, AWS, NGINX, AppGate, and Keycloak.
Administer Microsoft Active Directory, identity lifecycle processes, PKI, certificates, authentication flows, and directory services.
Implement and operate PAM governance, privileged-account monitoring, access reviews, audits, and PAR/RAR reporting.
Support AppGate SDP onboarding for users, endpoints, applications, and protected network resources.
Translate user, application, device, and connectivity needs into documented access-control requirements.
Produce IAM metrics, reports, dashboards, architecture documentation, and compliance materials for technical and government stakeholders.

Requirements

U.S. citizenship and an active DoD Secret security clearance.
High school diploma and 6+ years of IAM experience in a complex enterprise or federal environment.
Active DoD 8140 IAT Level II Security+ certification or higher, AWS Solutions Architect Associate certification, and AZ-104 or AZ-800 certification.
Experience with AppGate SDP, Microsoft Entra ID, AWS IAM, Active Directory, Keycloak, SAML, OpenID Connect, LDAP, and multifactor authentication.
Strong knowledge of RBAC, PAM, least privilege, Zero Trust architecture, networking fundamentals, access reviews, audits, and compliance reporting.
Ability to document identity architecture, troubleshoot access issues, and communicate complex IAM concepts to technical and non-technical stakeholders.

Nice to have

SC-300, AZ-500, AWS Security Specialty, CISSP, CISM, AppGate SDP Ranger, or AWS Cloud Practitioner certification.
Experience with DoD tools and frameworks, Microsoft 365, Azure, AWS, federal contractors or agencies, and NIST identity and Zero Trust guidance.
Scripting and automation experience with PowerShell, Bash, Perl, or VBScript.
Experience with enterprise mobility management, Windows-based systems, or Microsoft license management.

Culture & Benefits

Mission-driven work supporting defense, intelligence, and federal civilian agencies.
Hybrid work arrangement based in Fairfax, Virginia.
Opportunities to work with cybersecurity, data, AI, and enterprise transformation technologies.
Environment focused on delivery excellence, innovation, professional development, and high-performing teams.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →