Senior Cybersecurity Engineer, Identity & Access Management
Core
Design, build, and maintain identity architecture and role-based access control (RBAC) across cloud and on-premises directory services to protect Controlled Unclassified Information and export-controlled technical data.
Role type
Senior IC cybersecurity engineer (Identity & Access Management)
Builds
Coherent identity layer integrating IdP, IAM, PAM, PIM, and Secrets Management platforms
Domain
Defense Industrial Base (DIB) / Cybersecurity
Required skills
Identity architecture design, Role-based access control (RBAC), Joiner/Mover/Leaver (JML) automation, Authentication policy design, Phishing-resistant MFA, SIEM/EDR/SOAR integration, Privileged access management (PAM), Secrets management, Cloud IAM, SSO (SAML/OpenID Connect), SCIM, Active Directory administration, Access reviews
Preferred skills
Azure/AWS IAM, Enterprise password/secrets management platforms, Identity automation platforms, Microsoft 365 GCC High, PIM/PAW implementation, Active Directory attack path analysis (BloodHound/PingCastle), Query languages (ES|QL/KQL), Certificate-based authentication/FIDO2
Technologies
Entra ID, Active Directory, SAML, OpenID Connect, SCIM, PowerShell, Python, SIEM, EDR, SOAR, BloodHound, PingCastle
Responsibilities
Design and tune authentication policies and conditional access; Operate and mature a tiered administrative model including PAWs; Administer privileged identity management and password/secrets management platforms; Manage cloud infrastructure IAM and SaaS integration; Maintain Active Directory security and run periodic access reviews; Write and maintain IAM policies and procedures
Seniority
Senior, hands-on IC