IAM Engineer

Identity & Access Management (IAM) Engineer

Location: Fort Belvoir, Virginia (On-Site/Office)

Position Overview: We are seeking a highly skilled Identity & Access Management (IAM) Engineer to support mission-critical systems within a federal environment. This role will be responsible for designing, implementing, and maintaining secure identity and access solutions that protect sensitive government systems and data. The ideal candidate will have strong experience in IAM architecture, authentication technologies, identity lifecycle management, and access governance. Experience with the ForgeRock IAM platform is preferred, but candidates with other enterprise IAM solutions will also be considered.

Key Responsibilities:

• Design, implement, and support enterprise IAM solutions to manage authentication, authorization, and identity lifecycle.
• Configure and maintain Single Sign-On (SSO), federation, and access management solutions.
• Integrate IAM platforms with enterprise applications, directories, and cloud services.
• Develop and maintain identity provisioning and de-provisioning workflows.
• Implement Multi-Factor Authentication (MFA) and secure authentication protocols.
• Work with development and infrastructure teams to integrate secure identity controls into applications and systems.
• Monitor IAM environments to ensure security compliance and operational stability.
• Troubleshoot IAM authentication, authorization, and identity synchronization issues.
• Support security audits, compliance requirements, and access governance processes.

Required Qualifications:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field (or equivalent experience).
• 5+ years of experience in Identity & Access Management engineering or administration.
• Experience implementing or supporting enterprise IAM platforms such as: ForgeRock (preferred) SailPoint Okta Ping Identity Microsoft Entra ID / Azure AD IBM Security Verify
• Experience with SSO and federation technologies, including: SAML OAuth 2.0 OpenID Connect
• Strong understanding of LDAP, Active Directory, and directory services.
• Experience integrating IAM with enterprise applications and APIs.
• Knowledge of identity lifecycle management, access governance, and Role-Based Access Control (RBAC).

Preferred Qualifications

• Experience with ForgeRock IAM platform (AM, IDM, DS).
• Experience supporting federal or government environments.
• Familiarity with Zero Trust security architecture.
• Experience with automation and scripting (Groovy, Python, JavaScript, or PowerShell).