Principal Cloud IAM Engineer (US Federal)

Location: Reston, Virginia, USA; employees may be required to work on site at client locations in the DC, Maryland, and Virginia area. Flex Work requires at least 50% of each quarter in the office or in the field. U.S. citizenship is required, and the role may require the ability to obtain and maintain a U.S. government security clearance.

Annual base salary: $191,500–$287,300 USD for the primary location; additional U.S. locations: $173,300–$309,600 USD.

Company

hirify.global is a Fortune 500 enterprise cloud platform providing solutions for people management, finance operations, and government customers, including U.S. federal agencies.

What you will do

• Manage entitlements and permissions in AWS, Azure/Entra ID, or GCP cloud services.
• Automate identity administration, authentication, and authorization for resources in an air-gapped classified cloud environment.
• Centralize authentication and authorization using RBAC and PBAC.
• Build infrastructure and compliance as code using CI/CD pipelines, GitHub, and Terraform.
• Integrate cloud platforms with Okta, Entra ID, or similar tools for centralized authentication and SSO.
• Collaborate with cloud engineering and Cybersecurity teams on solutions for DoD and U.S. intelligence agencies.

Requirements

• U.S. citizenship is required.
• 8+ years of experience as a cloud engineer focused on IAM.
• Experience centralizing authentication and authorization, including RBAC and PBAC.
• Experience managing infrastructure as code with GitHub, Terraform, or similar tools.
• Experience developing automation tools in Python or other programming languages.
• Experience integrating cloud platforms with Okta, Entra ID, or similar tools for centralized authentication and SSO.
• Experience using SIEM tools such as Splunk for log aggregation and analysis, threat playbooks, and auditing.
• Familiarity with OAuth, OIDC, SAML, and SCIM federation protocols.
• Familiarity with identity governance workflows and user lifecycle management, including joiners, movers, and leavers.
• Familiarity with NIST 800-53 and DoD/intelligence control frameworks.
• Bachelor’s degree or higher in computer science, cybersecurity, or comparable work or educational experience.

Nice to have

• Active TS/SCI with CI Poly security clearance.
• Ability to meet DoD 8570/8140 requirements with at least IAT Level II certification, a current Computing Environment credential, and an approved specialty certification such as CompTIA CySA+, GICSP, or CASP+.

Culture & Benefits

• Flexible work combining office, field, and remote home-office work.
• At least 50% of each quarter is spent in the office or in the field, depending on the role.
• Eligibility for the hirify.global Bonus Plan or role-specific commission/bonus and annual refresh stock grants may apply.
• Reasonable accommodations are available during the application process.
• Equal opportunity employment includes individuals with disabilities and protected veterans.