出海雷达

身份与访问管理(IAM)工程师

Identity & Access Management (IAM) Engineer

开发工程限定地区(需当地身份)
公司DecisionPoint Corporation
薪资未公开
工作地点United States
地域资格限定地区(需当地身份)
时区要求日间重叠约 9 小时,基本正常作息
用工类型Full Time
发布时间12 天前
数据来源Himalayas
前往 Himalayas 查看并投递 →
注意地域限制:该职位明确限定在 United States 招聘。如果你是位于中国大陆的求职者,通常需要当地工作身份才能投递,或需与雇主确认是否接受独立合同(Contractor)形式合作。

Overview
DecisionPoint 寻求一名身份与访问管理(IAM)工程师,以支持大型联邦机构和国防部(DoD)相关任务环境的企业身份运营和认证服务。该职位负责跨云和本地环境的身份治理、访问控制执行、单点登录(SSO)集成以及多因素认证(MFA)功能。IAM 工程师将直接参与零信任身份支柱的实施,确保对关键任务系统的安全、可靠和策略驱动的访问。
该职位为全远程办公。

Duties & Responsibilities
身份与访问管理工程师将负责:
· 管理企业应用程序和服务之间的 SSO 集成。
· 配置和维护身份治理工作流、账户生命周期管理和访问审批流程。
· 实施和管理 MFA、条件访问策略和身份验证机制。
· 支持基于身份的访问控制开发与实施,符合零信任原则。
· 在云环境中配置 IAM 角色、权限和策略,包括 AWS IAM。
· 开展访问审查、权限审计和特权访问评估。
· 与网络安全团队合作,确保身份控制符合国防部的安全和合规要求。
· 排查与 SSO、MFA、目录服务和认证流程相关的身份问题。
· 协助身份路线图规划、现代化活动和能力增强。
· 维护身份标准、配置文档和架构制品。
· 支持与身份威胁或被入侵账户相关的事件响应活动。
· 参与 IAM 流程、操作手册和治理模型的开发与优化。

Qualifications
Clearance Requirement
必须持有有效的机密级(Top Secret)安全许可,并通过第五级背景调查。
Education (Required)
信息安全、信息技术、计算机科学或相关领域的学士学位。
Experience (Required)
· 至少 6 年身份与访问管理、认证工程或 IAM 运维经验。
· 具备实施或支持 SSO 集成、MFA 配置或身份治理流程的经验。
· 具备在云环境中管理 IAM 角色、策略和权限的经验(AWS 优先)。
· 具备开展访问审查和权限审计的经验。

查看英文原文

Overview
DecisionPoint seeks an Identity & Access Management (IAM) Engineer to support enterprise identity operations and authentication services for a large federal and DoD-aligned mission environment. This role manages identity governance, access control enforcement, single sign-on (SSO) integrations, and multi-factor authentication (MFA) capabilities across cloud and on-premise environments. The IAM Engineer will contribute directly to the implementation of the Zero Trust identity pillar, ensuring secure, reliable, and policy-driven access to mission-critical systems.
This position is fully remote.
Duties & Responsibilities
The Identity & Access Management Engineer will:
· Manage SSO integrations across enterprise applications and services.
· Configure and maintain identity governance workflows, account lifecycle management, and access approval processes.
· Implement and manage MFA, conditional access policies, and identity verification mechanisms.
· Support development and enforcement of identity-based access controls aligned with Zero Trust principles.
· Configure IAM roles, permissions, and policies in cloud environments, including AWS IAM.
· Conduct access reviews, entitlement audits, and privileged access assessments.
· Partner with cybersecurity teams to align identity controls with DoD security and compliance requirements.
· Troubleshoot identity issues related to SSO, MFA, directory services, and authentication flows.
· Assist with identity roadmap planning, modernization activities, and capability enhancements.
· Maintain identity standards, configuration documentation, and architectural artifacts.
· Support incident response activities related to identity threats or compromised accounts.
· Contribute to the development and refinement of IAM procedures, playbooks, and governance models.
Qualifications
Clearance Requirement
Must hold an active Top Secret clearance, supported by a Tier 5 background investigation.
Education (Required)
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
Experience (Required)
· Minimum 6 years of experience in identity and access management, authentication engineering, or IAM operations.
· Experience implementing or supporting SSO integrations, MFA configurations, or identity governance processes.
· Experience managing IAM roles, policies, and permissions in cloud environments (AWS preferred).
· Experience conducting access reviews, entitlement audits, or privilege management activities.
· Experience supporting the implementation of identity-focused security controls.
Technical Knowledge (Required)
· Strong understanding of IAM concepts, including authentication, authorization, federation, and identity governance.
· Experience with SSO technologies, MFA systems, and identity providers.
· Proficiency in AWS IAM roles, policies, access keys, and permission boundaries.
· Knowledge of Zero Trust identity principles and identity-centric access control models.
· Understanding of DoD cybersecurity requirements related to identity and access management.
Technical Knowledge (Preferred)
· Experience with directory services (e.g., Active Directory, Azure AD).
· Familiarity with identity risk scoring, behavioral analytics, or conditional access signals.
· Experience integrating IAM with CI/CD pipelines or DevSecOps workflows.
Certifications

Required:
· Security+
Preferred:
· AWS IAM or AWS Security specialty certification
· Additional DoD 8570/8140 IAM-related certifications
Skills
· Strong problem-solving abilities for diagnosing authentication and access issues.
· Excellent communication skills for collaborating with cybersecurity, engineering, and application teams.
· High attention to detail for managing access controls, policies, and identity workflows.
· Ability to manage multiple IAM initiatives in a fast-paced, mission-critical environment.
· Strong documentation skills for maintaining identity policies, standards, and technical procedures.
Our Equal Employment Opportunity Policy

  • EEO and Affirmative Action Policy: DecisionPoint Corporation is an Equal Employment Opportunity and Affirmative Action employer. It is the policy of DecisionPoint Corporation to provide equal employment opportunity in accordance with all applicable Equal Employment Opportunity/Affirmative Action laws, directives and regulations to all employees and qualified applicants without regard to race, ethnicity, color, religion, national origin, sex, age, disability status, pregnancy, sexual orientation, gender identity, genetic information, protected veteran status, or any other protected status under Federal, State or Local laws.
  • Pay Transparency Policy: In accordance with Presidential Executive Order 13665, DecisionPoint Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.
  • Authorization to Share Resume and Personal Information: By expressing your interest and submitting your resume for this position, you authorize DecisionPoint Corporation to share your resume, as well as personal information included on the resume, with its subsidiaries, affiliates and teaming partners for the purpose of considering you for this position and other available positions requiring comparable skills, education and experience. Should DecisionPoint Corporation. or its affiliates and teaming partners wish to initiate pre-employment discussions, you will be asked to complete an employment application and related employment documents.

Originally posted on Himalayas

本页面信息整理自 Himalayas,版权归原发布方所有。职位可能随时关闭,投递请以原始页面为准。 本站只做信息聚合展示,不参与招聘流程,也不向求职者收取任何费用。

该公司其他在招职位

活动经理

DecisionPoint CorporationUnited StatesFull Time6 天前
市场运营职能支持限定地区(需当地身份)

社区参与策略师

DecisionPoint CorporationUnited StatesFull Time6 天前
市场运营限定地区(需当地身份)

高级系统架构师

DecisionPoint CorporationUnited StatesFull Time7 天前
开发工程职能支持限定地区(需当地身份)

← 返回全部职位