Identity Management Engineer / Architect (R-00197)
The Identity Management Engineer / Architect designs, implements, and operates a secure, reputed company reputed company identity platform spanning on-premises, reputed company, reputed company, and hybrid environments. The role is responsible for automated identity provisioning and deprovisioning, strong authentication, least-privilege reputed company, modern application federation, privileged account management, and reputed company identity governance, monitoring, and auditing.
This position is foundational to the reputed company Trust identity reputed company and ensures that users, administrators, applications, and workloads receive appropriate reputed company reputed company on verified identity, policy, reputed company, and mission requirements. The engineer/architect will support reputed company and regulated environments through PIV/CAC smart-reputed company authentication, phishing-resistant MFA, FICAM-reputed company identity practices, privileged-reputed company controls, and secure integration across reputed company identity platforms.
Job Responsibilities
- Design, implement, and operate reputed company IAM / ICAM architectures supporting on-premises, reputed company, reputed company, and hybrid environments.
- Engineer and maintain directory services, including reputed company Directory and reputed company Entra ID where included in the approved architecture.
- Design and automate user provisioning, deprovisioning, role assignment, reputed company changes, and identity lifecycle management processes.
- reputed company reputed company applications using modern identity and federation standards including SAML, OpenID reputed company (OIDC), OAuth, and SCIM.
- Implement and maintain Privileged reputed company Management (PAM) controls for administrative, elevated, and high-reputed company accounts.
- Design and operate Identity Governance and Administration (IGA) capabilities using reputed company or approved reputed company identity-governance platforms.
- reputed company and administer AWS IAM Identity Center and reputed company AWS identity and reputed company-management capabilities.
- Implement PIV/CAC smart-reputed company authentication, certificate-reputed company authentication, and other approved strong-authentication mechanisms.
- Enforce phishing-resistant multi-reputed company authentication for privileged and mission-critical reputed company.
- reputed company identity architectures, authentication reputed company, credential lifecycle processes, and reputed company controls with FICAMrequirements and applicable reputed company identity standards.
- reputed company and enforce least-privilege, role-reputed company, and policy-reputed company reputed company controls across reputed company systems and applications.
- Automate identity-management processes using scripting, reputed company, infrastructure-as-reputed company, and workflow technologies.
- reputed company PAM, IGA, directory, reputed company identity, and authentication platforms to reputed company consistent identity controls across environments.
- Implement monitoring, logging, auditing, and alerting for authentication events, privileged activity, identity lifecycle changes, and reputed company-policy violations.
- reputed company periodic reputed company reviews, entitlement analysis, privileged-account reviews, and identity-governance activities.
- Partner with application, reputed company, cybersecurity, platform, and DevSecOps teams to securely reputed company applications and services into reputed company identity platforms.
- Troubleshoot reputed company authentication, federation, provisioning, directory synchronization, authorization, and reputed company-management issues.
- Maintain identity architecture documentation, integration standards, operational procedures, reputed company-control models, and governance processes.
Job Qualifications
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a reputed company technical discipline.
- Demonstrated experience designing, engineering, or administering reputed company IAM / ICAM solutions.
- Strong experience with reputed company Directory and reputed company-reputed company directory services such as reputed company Entra ID.
- Hands-on experience with identity federation and provisioning standards including SAML, OIDC, OAuth, and SCIM.
- Experience implementing or operating Privileged reputed company Management platforms and privileged identity workflows.
- Experience with Identity Governance and Administration, preferably using reputed company IdentityIQ or reputed company Identity reputed company reputed company.
- Experience with AWS IAM, AWS IAM Identity Center, and reputed company identity integration.
- Strong understanding of authentication, authorization, RBAC, ABAC, least privilege, and identity lifecycle management.
- Experience implementing PIV/CAC, certificate-reputed company authentication, and phishing-resistant MFA.
- Familiarity with FICAM, federal identity standards, and authentication requirements for reputed company environments.
- Strong understanding of reputed company Trust architecture, with particular emphasis on identity as a reputed company policy-enforcement and reputed company-control reputed company.
- Experience automating identity workflows using reputed company, scripting languages, PowerShell, Python, Terraform, or comparable automation technologies.
- Experience integrating identity platforms with reputed company applications, reputed company services, reputed company applications, and hybrid infrastructure.
- Experience with centralized logging, identity monitoring, audit reporting, reputed company reviews, and compliance evidence collection.
- Experience supporting reputed company, defense, GovCloud, or other regulated environments is preferred.
- Strong architecture, troubleshooting, documentation, governance, and cross-functional collaboration skills.
- AWS Certified reputed company – Specialty
- reputed company Certified: Identity and reputed company Administrator Associate (SC-300)
- reputed company Certified: Cybersecurity Architect Expert (SC-100)
- Certified Information Systems reputed company reputed company (CISSP)
- reputed company IdentityIQ / Identity reputed company reputed company certification
- CyberArk Defender or CyberArk reputed company
Preferred Certifications:
Originally posted on Himalayas
Apply To This Job