**This position is contingent upon contract award**
SOSi is seeking a IAM Engineers to support mission requirements for a structured approach to further develop, integrate, and sustain a scalable, federated data ecosystem that enhances interoperability, governance, and mission-driven analytics for a DoD customer. The primary objective of the program is to bridge the operational gaps between DoD, IC, interagency, and non-traditional international partners to enable real-time information sharing, dynamic data integration, and mission-tailored analytical capabilities.
- Design, implement, and manage Identity and Access Management (IAM) solutions, ensuring secure authentication and access control across cloud and on-premises environments.
- Enforce Zero Trust Architecture (ZTA) principles and role-based access control (RBAC) policies to protect mission-critical systems.
- Integrate IAM solutions with Microsoft Entra ID (formerly Azure Active Directory), Public Key Infrastructure (PKI), and Common Access Card (CAC) authentication mechanisms.
- Oversee IAM automation, ensuring streamlined provisioning and de-provisioning of user roles and permissions.
- Submit the Identity & Access Management Compliance Report, detailing system configurations, access logs, and compliance status
Minimum Requirements:
- Active in-scope SECRET Clearance.
- Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or a related field, or
- five (5) years of equivalent experience in IAM engineering.
- Demonstrated experience in designing and managing IAM frameworks in cloud environments (AWS, Azure), configuring identity governance tools, and implementing zero-trust architecture models.
- Experience with tools such as Microsoft Entra ID (formerly Azure AD), Okta, Ping Identity, or AWS IAM is required.
- Possess the knowledge and capability to design, implement, and manage Identity and Access Management (IAM) solutions within secure cloud and on-premises environments.
- Proficient in authentication protocols (SAML, OAuth, OpenID Connect), role-based access control (RBAC), multi-factor authentication (MFA), and identity federation across hybrid environments.
- Strong knowledge of DoD IL2, IL4, and IL5 security frameworks and compliance standards is required.
Preferred Qualifications:
- Desirable but not required certifications include Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, or Microsoft Certified: Identity and Access Administrator Associate.
Working Conditions:
- The work to be performed remotely
- Must have strong internet connection
- Quit workspace free from interruptions
Working at SOSi:
All interested individuals will receive consideration and will not be discriminated against for any reason.