Today
Top Secret/SCI
Senior Level Career (10+ yrs experience)
IT - Security
We are seeking a highly skilled Senior Identity and Access Management (IAM) Engineer to design, implement, and optimize a comprehensive Keycloak-based identity management ecosystem. This role will focus on enabling secure integration with multiple third-party Identity Providers (IDPs), strengthening multi-factor authentication (MFA) capabilities, and streamlining Single Sign-On (SSO) workflows across enterprise systems. The ideal candidate will possess deep technical expertise in modern authentication standards, certificate management, and Active Directory integration within secure, large-scale cloud environments.
Key Responsibilities
Design, develop, and implement a robust Keycloak identity management system to support integration with multiple third-party IDPs.
Configure and optimize Single Sign-On (SSO) capabilities with recent sign-on capture and authentication stapling to reduce redundant login prompts across connected systems.
Implement and enforce Multi-Factor Authentication (MFA) controls to ensure compliance with enterprise and federal security requirements.
Conduct multi-system authorization boundary reviews, including Active Directory attribute validation, third-party system integration, and end-to-end certificate verification.
Design and implement integration frameworks for third-party Certificate Authorities (CAs) from partner organizations supporting bring-your-own-identity (BYOI) solutions.
Develop and test one-way trust configurations between IDPs to maintain strict separation of authorization boundaries under government control.
Support legacy system integration by designing secure authentication mechanisms for environments lacking native support for modern standards (e.g., passkey, SAML, OIDC).
Collaborate with security, cloud, and network teams to ensure the identity architecture aligns with AWS and enterprise security best practices.
Perform design reviews, testing, and documentation to ensure the reliability, scalability, and compliance of identity management solutions.
Required Skills & Qualifications
AWS Certified Solutions Architect – Associate (Professional preferred)
Proven experience in Keycloak administration and configuration
Deep understanding of Identity and Access Management (IAM) principles and best practices
Strong hands-on experience implementing Multi-Factor Authentication (MFA) and Single Sign-On (SSO) solutions
Proficiency with SAML 2.0 and OpenID Connect (OIDC) protocols
Demonstrated experience with Active Directory integration and attribute-based access control
Expertise in Certificate Authority (CA) management and PKI infrastructure
Experience designing and implementing one-way trust configurations across secure environments
Advanced knowledge of authentication protocol design and identity federation models
Strong understanding of authorization boundary controls within hybrid and government environments
Preferred Qualifications
Experience supporting federal identity management and compliance standards (e.g., NIST 800-63, FedRAMP, or DoD standards)
Familiarity with AWS IAM, Cognito, or hybrid identity solutions
Excellent documentation, troubleshooting, and communication skills
Clearance
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. Requires active TS/SCI Clearance.
Compensation and Benefits
Salary Range: $180,000 - $225,000 (Compensation is determined by various factors, including but not limited to location, work experience, skills, education, certifications, seniority, and business needs. This range may be modified in the future.)
Benefits: Gridiron offers a comprehensive benefits package including medical, dental, vision insurance, HSA, FSA, 401(k), disability & ADD insurance, life and pet insurance to eligible employees. Full-time and part-time employees working at least 30 hours per week on a regular basis are eligible to participate in Gridiron’s benefits programs.
Gridiron IT Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status or disability status.
Gridiron IT is a Women Owned Small Business (WOSB) headquartered in the Washington, D.C. area that supports our clients' missions throughout the United States. Gridiron IT specializes in providing comprehensive IT services tailored to meet the needs of federal agencies. Our capabilities include IT Infrastructure & Cloud Services, Cyber Security, Software Integration & Development, Data Solution & AI, and Enterprise Applications. These capabilities are backed by Gridiron IT's experienced workforce and our commitment to ensuring we meet and exceed our clients' expectations.
Key Responsibilities
Design, develop, and implement a robust Keycloak identity management system to support integration with multiple third-party IDPs.
Configure and optimize Single Sign-On (SSO) capabilities with recent sign-on capture and authentication stapling to reduce redundant login prompts across connected systems.
Implement and enforce Multi-Factor Authentication (MFA) controls to ensure compliance with enterprise and federal security requirements.
Conduct multi-system authorization boundary reviews, including Active Directory attribute validation, third-party system integration, and end-to-end certificate verification.
Design and implement integration frameworks for third-party Certificate Authorities (CAs) from partner organizations supporting bring-your-own-identity (BYOI) solutions.
Develop and test one-way trust configurations between IDPs to maintain strict separation of authorization boundaries under government control.
Support legacy system integration by designing secure authentication mechanisms for environments lacking native support for modern standards (e.g., passkey, SAML, OIDC).
Collaborate with security, cloud, and network teams to ensure the identity architecture aligns with AWS and enterprise security best practices.
Perform design reviews, testing, and documentation to ensure the reliability, scalability, and compliance of identity management solutions.
Required Skills & Qualifications
AWS Certified Solutions Architect – Associate (Professional preferred)
Proven experience in Keycloak administration and configuration
Deep understanding of Identity and Access Management (IAM) principles and best practices
Strong hands-on experience implementing Multi-Factor Authentication (MFA) and Single Sign-On (SSO) solutions
Proficiency with SAML 2.0 and OpenID Connect (OIDC) protocols
Demonstrated experience with Active Directory integration and attribute-based access control
Expertise in Certificate Authority (CA) management and PKI infrastructure
Experience designing and implementing one-way trust configurations across secure environments
Advanced knowledge of authentication protocol design and identity federation models
Strong understanding of authorization boundary controls within hybrid and government environments
Preferred Qualifications
Experience supporting federal identity management and compliance standards (e.g., NIST 800-63, FedRAMP, or DoD standards)
Familiarity with AWS IAM, Cognito, or hybrid identity solutions
Excellent documentation, troubleshooting, and communication skills
Clearance
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. Requires active TS/SCI Clearance.
Compensation and Benefits
Salary Range: $180,000 - $225,000 (Compensation is determined by various factors, including but not limited to location, work experience, skills, education, certifications, seniority, and business needs. This range may be modified in the future.)
Benefits: Gridiron offers a comprehensive benefits package including medical, dental, vision insurance, HSA, FSA, 401(k), disability & ADD insurance, life and pet insurance to eligible employees. Full-time and part-time employees working at least 30 hours per week on a regular basis are eligible to participate in Gridiron’s benefits programs.
Gridiron IT Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status or disability status.
Gridiron IT is a Women Owned Small Business (WOSB) headquartered in the Washington, D.C. area that supports our clients' missions throughout the United States. Gridiron IT specializes in providing comprehensive IT services tailored to meet the needs of federal agencies. Our capabilities include IT Infrastructure & Cloud Services, Cyber Security, Software Integration & Development, Data Solution & AI, and Enterprise Applications. These capabilities are backed by Gridiron IT's experienced workforce and our commitment to ensuring we meet and exceed our clients' expectations.
group id: 91017793
