身份与访问管理(IAM)工程师
Identity & Access Management (IAM) Engineer
Overview
DecisionPoint 寻求一名身份与访问管理(IAM)工程师,以支持大型联邦机构和国防部(DoD)相关任务环境的企业身份运营和认证服务。该职位负责跨云和本地环境的身份治理、访问控制执行、单点登录(SSO)集成以及多因素认证(MFA)功能。IAM 工程师将直接参与零信任身份支柱的实施,确保对关键任务系统的安全、可靠和策略驱动的访问。
该职位为全远程办公。
Duties & Responsibilities
身份与访问管理工程师将负责:
· 管理企业应用程序和服务之间的 SSO 集成。
· 配置和维护身份治理工作流、账户生命周期管理和访问审批流程。
· 实施和管理 MFA、条件访问策略和身份验证机制。
· 支持基于身份的访问控制开发与实施,符合零信任原则。
· 在云环境中配置 IAM 角色、权限和策略,包括 AWS IAM。
· 开展访问审查、权限审计和特权访问评估。
· 与网络安全团队合作,确保身份控制符合国防部的安全和合规要求。
· 排查与 SSO、MFA、目录服务和认证流程相关的身份问题。
· 协助身份路线图规划、现代化活动和能力增强。
· 维护身份标准、配置文档和架构制品。
· 支持与身份威胁或被入侵账户相关的事件响应活动。
· 参与 IAM 流程、操作手册和治理模型的开发与优化。
Qualifications
Clearance Requirement
必须持有有效的机密级(Top Secret)安全许可,并通过第五级背景调查。
Education (Required)
信息安全、信息技术、计算机科学或相关领域的学士学位。
Experience (Required)
· 至少 6 年身份与访问管理、认证工程或 IAM 运维经验。
· 具备实施或支持 SSO 集成、MFA 配置或身份治理流程的经验。
· 具备在云环境中管理 IAM 角色、策略和权限的经验(AWS 优先)。
· 具备开展访问审查和权限审计的经验。
查看英文原文
Overview
DecisionPoint seeks an Identity & Access Management (IAM) Engineer to support enterprise identity operations and authentication services for a large federal and DoD-aligned mission environment. This role manages identity governance, access control enforcement, single sign-on (SSO) integrations, and multi-factor authentication (MFA) capabilities across cloud and on-premise environments. The IAM Engineer will contribute directly to the implementation of the Zero Trust identity pillar, ensuring secure, reliable, and policy-driven access to mission-critical systems.
This position is fully remote.
Duties & Responsibilities
The Identity & Access Management Engineer will:
· Manage SSO integrations across enterprise applications and services.
· Configure and maintain identity governance workflows, account lifecycle management, and access approval processes.
· Implement and manage MFA, conditional access policies, and identity verification mechanisms.
· Support development and enforcement of identity-based access controls aligned with Zero Trust principles.
· Configure IAM roles, permissions, and policies in cloud environments, including AWS IAM.
· Conduct access reviews, entitlement audits, and privileged access assessments.
· Partner with cybersecurity teams to align identity controls with DoD security and compliance requirements.
· Troubleshoot identity issues related to SSO, MFA, directory services, and authentication flows.
· Assist with identity roadmap planning, modernization activities, and capability enhancements.
· Maintain identity standards, configuration documentation, and architectural artifacts.
· Support incident response activities related to identity threats or compromised accounts.
· Contribute to the development and refinement of IAM procedures, playbooks, and governance models.
Qualifications
Clearance Requirement
Must hold an active Top Secret clearance, supported by a Tier 5 background investigation.
Education (Required)
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
Experience (Required)
· Minimum 6 years of experience in identity and access management, authentication engineering, or IAM operations.
· Experience implementing or supporting SSO integrations, MFA configurations, or identity governance processes.
· Experience managing IAM roles, policies, and permissions in cloud environments (AWS preferred).
· Experience conducting access reviews, entitlement audits, or privilege management activities.
· Experience supporting the implementation of identity-focused security controls.
Technical Knowledge (Required)
· Strong understanding of IAM concepts, including authentication, authorization, federation, and identity governance.
· Experience with SSO technologies, MFA systems, and identity providers.
· Proficiency in AWS IAM roles, policies, access keys, and permission boundaries.
· Knowledge of Zero Trust identity principles and identity-centric access control models.
· Understanding of DoD cybersecurity requirements related to identity and access management.
Technical Knowledge (Preferred)
· Experience with directory services (e.g., Active Directory, Azure AD).
· Familiarity with identity risk scoring, behavioral analytics, or conditional access signals.
· Experience integrating IAM with CI/CD pipelines or DevSecOps workflows.
Certifications
Required:
· Security+
Preferred:
· AWS IAM or AWS Security specialty certification
· Additional DoD 8570/8140 IAM-related certifications
Skills
· Strong problem-solving abilities for diagnosing authentication and access issues.
· Excellent communication skills for collaborating with cybersecurity, engineering, and application teams.
· High attention to detail for managing access controls, policies, and identity workflows.
· Ability to manage multiple IAM initiatives in a fast-paced, mission-critical environment.
· Strong documentation skills for maintaining identity policies, standards, and technical procedures.
Our Equal Employment Opportunity Policy
- EEO and Affirmative Action Policy: DecisionPoint Corporation is an Equal Employment Opportunity and Affirmative Action employer. It is the policy of DecisionPoint Corporation to provide equal employment opportunity in accordance with all applicable Equal Employment Opportunity/Affirmative Action laws, directives and regulations to all employees and qualified applicants without regard to race, ethnicity, color, religion, national origin, sex, age, disability status, pregnancy, sexual orientation, gender identity, genetic information, protected veteran status, or any other protected status under Federal, State or Local laws.
- Pay Transparency Policy: In accordance with Presidential Executive Order 13665, DecisionPoint Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.
- Authorization to Share Resume and Personal Information: By expressing your interest and submitting your resume for this position, you authorize DecisionPoint Corporation to share your resume, as well as personal information included on the resume, with its subsidiaries, affiliates and teaming partners for the purpose of considering you for this position and other available positions requiring comparable skills, education and experience. Should DecisionPoint Corporation. or its affiliates and teaming partners wish to initiate pre-employment discussions, you will be asked to complete an employment application and related employment documents.
Originally posted on Himalayas