IAM Engineer
**该职位取决于合同授予**SOSi 正在寻求一个 IAM 工程师来支持任务要求，以进一步开发，集成和维持可扩展的联合数据生态系统，从而提高对国防部客户的互操作性，治理和使命驱动分析。该计划的主要目标是弥合国防部，IC,机构间和国际合作伙伴之间的运营差距，以便实时信息共享，动态数据整合以及定制任务分析能力。· 设计，实施和管理身份与访问管理 (IAM) 解决方案，确保云和本地环境中安全的认证和访问控制。· 执行零信任架构 (ZTA) 原则和基于角色的访问控制 (RBAC) 政策来保护关键系统。· 将 IAM 解决方案集成到 Microsoft Entra ID （以前是 Azure Active Directory）,公共钥匙基础设施 (PKI) 和通用访问卡 (CAC) 认证机制。·监督 IAM 自动化，确保简单提供用户角色和权限。·提交身份与访问管理合规性报告，详细说明系统配置，访问日志和合规状态最低要求：· 活动范围内的秘密清除。· 在网络安全，信息保证，计算机科学或相关领域的学士学位，或者·五 (5) 年等同经验在 IAM 工程中。· 在云环境 (AWS,Azure) 中设计和管理 IAM 框架，配置身份治理工具以及实施零信任架构模型方面的证明经验。·需要使用 Microsoft Entra ID （以前是 Azure AD）,Okta,Identity Ping 或 AWS IAM 等工具的经验。· 拥有在安全云和本地环境中设计，实施和管理身份与访问管理 (IAM) 解决方案的知识和能力。·熟练识别协议 (SAML,OAuth,OpenID Connect),基于角色的访问控制 (RBAC),多因素认证 (MFA),以及跨混合环境中的身份联合。·需要对 DoD IL2,IL4和 IL5安全框架和合规标准的强大知识。优先资格：·可要求但不必需的认证包括信息系统安全专业人员 (CISSP), AWS 认证安全专业或微软认证：I
查看英文原文
**This position is contingent upon contract award**
SOSi is seeking a IAM Engineers to support mission requirements for a structured approach to further develop, integrate, and sustain a scalable, federated data ecosystem that enhances interoperability, governance, and mission-driven analytics for a DoD customer. The primary objective of the program is to bridge the operational gaps between DoD, IC, interagency, and non-traditional international partners to enable real-time information sharing, dynamic data integration, and mission-tailored analytical capabilities.
- Design, implement, and manage Identity and Access Management (IAM) solutions, ensuring secure authentication and access control across cloud and on-premises environments.
- Enforce Zero Trust Architecture (ZTA) principles and role-based access control (RBAC) policies to protect mission-critical systems.
- Integrate IAM solutions with Microsoft Entra ID (formerly Azure Active Directory), Public Key Infrastructure (PKI), and Common Access Card (CAC) authentication mechanisms.
- Oversee IAM automation, ensuring streamlined provisioning and de-provisioning of user roles and permissions.
- Submit the Identity & Access Management Compliance Report, detailing system configurations, access logs, and compliance status
Minimum Requirements:
- Active in-scope SECRET Clearance.
- Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or a related field, or· five (5) years of equivalent experience in IAM engineering.
- Demonstrated experience in designing and managing IAM frameworks in cloud environments (AWS, Azure), configuring identity governance tools, and implementing zero-trust architecture models.
- Experience with tools such as Microsoft Entra ID (formerly Azure AD), Okta, Ping Identity, or AWS IAM is required.
- Possess the knowledge and capability to design, implement, and manage Identity and Access Management (IAM) solutions within secure cloud and on-premises environments.
- Proficient in authentication protocols (SAML, OAuth, OpenID Connect), role-based access control (RBAC), multi-factor authentication (MFA), and identity federation across hybrid environments.
- Strong knowledge of DoD IL2, IL4, and IL5 security frameworks and compliance standards is required.
Preferred Qualifications:
· Desirable but not required certifications include Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, or Microsoft Certified: Identity and Access Administrator Associate.
Working Conditions:
- The work to be performed remotely
- Must have strong internet connection
- Quit workspace free from interruptions
Working at SOSi:
All interested individuals will receive consideration and will not be discriminated against for any reason.
Founded in 1989, SOSi is among the largest private, founder-owned technology and services integrators in the defense and government services industry. We deliver tailored solutions, tested leadership, and trusted results to enable national security missions worldwide.
Originally posted on Himalayas