Junior Identity/Credential and Access Management (IAM) Engineer

Job Title: Junior Identity/Credential and Access Management (IAM) Engineer<p style="text-align:inherit"></p><p style="text-align:inherit"></p>Job Category: Information Technology<p style="text-align:inherit"></p><p style="text-align:inherit"></p>Time Type: Full time<p style="text-align:inherit"></p><p style="text-align:inherit"></p>Minimum Clearance Required to Start: None<p style="text-align:inherit"></p><p style="text-align:inherit"></p>Employee Type: Regular<p style="text-align:inherit"></p><p style="text-align:inherit"></p>Percentage of Travel Required: None<p style="text-align:inherit"></p><p style="text-align:inherit"></p>Type of Travel: None<p style="text-align:inherit"></p><p style="text-align:inherit"></p>* * *<p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p><br><b><u>The Opportunity:</u></b></p><p></p><p>CACI is seeking an experienced Azure ICAM Engineer to be part of a dynamic and high performing team integrating and transitioning a government customer to the Microsoft Azure platform.  As an Identify and Access Management engineer you will provide technical guidance to program manager and key stakeholders on enterprise scale projects and solutions. The ICAM Engineer is responsible for implementing the solutions designed by the ICAM architect.<br> <br>This engineer will be a key member on a team delivering next generation ICAM services. In this role the Engineer will assist with defining, developing, and implementing an ICAM solution that reduces risk and provides resiliency, while accelerating business initiatives. This ICAM engineer will be working collaboratively with Azure Active Directory, Network and Security Architects. Additionally, the engineer will coordinate with vendors to evaluate, test, and deploy new technology solutions.<br> </p><p></p><p><u><b>Responsibilities:</b></u></p><p><br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Implement ICAM solutions to support PIV, Certificate Base Authentication, FIDO 2.<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Engineer and build a secure and robust enterprise identify and access management solution<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Responsible for installing, customizing, configuration and supporting SailPoint Identity and Access Management tool and processes. This includes automated <span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">provisioning/deprovisioning</span> to downstream applications.<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Facilitate and support ICAM integration to business applications and third parties, including Single Sign On enablement and management<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Collaborate with customer to define organization constructs/naming conventions and user access roles<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Assist with the development of process and workflows to support ICAM operation activities such as user onboarding, user lifecycle management and privilege access management<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Provide assistance with the integration of an Enterprise PKI solution.<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Engage with, and advise stakeholders within the business on Identity and Access Management best practices<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Define, improve, and support Active Directory, Azure Active Directory and Privileged Access Management within the organization<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Identify areas for delivery automated solutions (e.g. <span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">onboarding/offboarding)</span> and maturation of existing processes by leveraging scripting<br> </p><p><br><u><b>Qualifications:</b></u></p><p></p><p><i>Required </i></p><p><br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Ability to obtain Department of Homeland Security (DHS) Entry On Duty (EOD) - Active EOD preferred<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> BA/BS + 7 years of applicable experience; AA + 12 years’ applicable experience, MA + 7 or 16 years experience no degree<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Experience and knowledge in building out SailPoint IDAM solutions<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Experience in the Identity space with a background in Active Directory or similar LDAP stores<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Strong knowledge of HSPD12 and implementation of government smart card authentication<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Expert knowledge of authentication with SAML, OAuth, OpenID, WSO2, and Kerberos<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Prior experience in providing RBAC solutions for clouds solutions (e.g. Azure)<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Strong scripting and automation abilities including PowerShell<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Understanding of Microsoft Azure PIM, Access Review, Service Principles, Managed Identities and ABAC<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Strong knowledge of enterprise PKI integration with SCEP and ACME clients<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Experience creating technical architecture documentation<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Strong communication and written skills<br><i> <br>Desired</i>:</p><p><br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> ITILv3 or v4 Foundation’s certification<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Previous DHS or DoD experience<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> CompTIA A+, or Network+, or Security+<br><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">•             </span> Experience with Azure Cloud, scripting, and automation</p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p>-<p></p><p><br></p><p><b><u>What You Can Expect:</u></b></p><p><b> A culture of integrity.</b></p><p>At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.</p><p><b>An environment of trust.</b></p><p>CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.</p><p><b>A focus on continuous growth.</b></p><p>Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.</p><p></p><p><br></p><p><b><u>Pay Range</u></b>: </p><p>There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.</p><p></p><p>Since this position can be worked in more than one location, the range shown is the national average for the position.</p><p></p><p>The proposed salary range for this position is: </p>$98,500-$206,800<p></p><p></p><p><i>CACI is <span><span><span><span><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">an Equal Opportunity</span> Employer.</span></span></span></span> All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any <span><span><span><span><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">other protected characteristic.</span></span></span></span></span></i></p><p></p><p></p><p></p><p></p><p></p>

Back to blog