IAM (Identity and Access Management) Engineer

Remote U.S.

Active Secret Clearance Required

@Orchard is partnered with a cutting edge geospatial technology client in their search for an IAM (Identity and Access Management) Engineer to support mission requirements for a structured approach to further develop, integrate, and sustain a scalable, federated data ecosystem that enhances interoperability, governance, and mission-driven analytics for a DoD customer. The primary objective of the program is to bridge the operational gaps between DoD, IC, interagency, and non-traditional international partners to enable real-time information sharing, dynamic data integration, and mission-tailored analytical capabilities.

Essential Job Duties:

·        Design, implement, and manage Identity and Access Management (IAM) solutions, ensuring secure authentication and access control across cloud and on-premises environments.

·        Enforce Zero Trust Architecture (ZTA) principles and role-based access control (RBAC) policies to protect mission-critical systems.

·        Integrate IAM solutions with Microsoft Entra ID (formerly Azure Active Directory), Public Key Infrastructure (PKI), and Common Access Card (CAC) authentication mechanisms.

·        Oversee IAM automation, ensuring streamlined provisioning and de-provisioning of user roles and permissions.

·        Submit the Identity & Access Management Compliance Report, detailing system configurations, access logs, and compliance status.

Minimum Requirements:

·        U.S. Citizenship

·        Active SECRET Clearance

·        Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or a related field, or

o   five (5) years of equivalent experience in IAM engineering.

·        Demonstrated experience in designing and managing IAM frameworks in cloud environments (AWS, Azure), configuring identity governance tools, and implementing zero-trust architecture models.

·        Experience with tools such as Microsoft Entra ID (formerly Azure AD), Okta, Ping Identity, or AWS IAM is required.

·        Possess the knowledge and capability to design, implement, and manage Identity and Access Management (IAM) solutions within secure cloud and on-premises environments.

·        Proficient in authentication protocols (SAML, OAuth, OpenID Connect), role-based access control (RBAC), multi-factor authentication (MFA), and identity federation across hybrid environments.

·        Strong knowledge of DoD IL2, IL4, and IL5 security frameworks and compliance standards is required.

Preferred Qualifications:

·        Desirable but not required certifications include Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, or Microsoft Certified: Identity and Access Administrator Associate.

Established in 2010, @Orchard has an exceptional reputation, providing talent acquisition solutions to time-sensitive, talent scarcity issues to deliver better talent management ROI.  Our specialty lies in the critical area of program talent acquisition and resource management, not in one narrow skillset, but across many areas of technical and functional delivery. To learn more about our other exciting opportunities, visit our Jobs Page at www.atorchard.com.