Job Requirements
Wash, DC Reston, VA Alexandria, VA Columbia, MD
Top Secret/SCI CI Polygraph
Senior Level Career (10+ yrs experience)
$165,000 - $225,000
Job Description
Job Title: Identity and Access Management (IAM) Engineer (Microsoft Stack)
Location: On-site (Multiple locations across Washington D.C., Maryland, and Northern Virginia)
Employment Type: Full-time
Security Clearance: Active TS/SCI Required (CI Polygraph Eligible)
Salary Range: $165,000 – $225,000 / year (Dependent on experience, certifications, and polygraph status)
Job Summary
We are seeking an Identity and Access Management (IAM) Engineer specializing in the Microsoft ecosystem to design, secure, and maintain our enterprise identity infrastructure within classified environments. In this role, you will lead the implementation and support of identity services across secure networks. You will leverage Microsoft Entra ID and Azure services to enforce Least Privilege principles, optimize user lifecycles, and drive our transition toward a Zero Trust architecture.
This position requires 100% on-site work due to the secure nature of the environments. Candidates must be flexible to support multiple facility locations across the DC, MD, and VA (DMV) area.
Key Responsibilities
• On-Site & Facility Operations: Provide dedicated on-site engineering support across designated secure facilities in Washington D.C., Maryland, and Virginia.
• Entra ID Administration: Configure and maintain Microsoft Entra ID, including Entra ID Governance, App Registrations, and Enterprise Applications within secure cloud environments.
• Hybrid Identity Management: Manage and monitor hybrid directory architectures using Microsoft Entra Connect / Cloud Sync to synchronize on-premises Active Directory with the cloud.
• Conditional Access & MFA: Design, test, and deploy advanced Conditional Access policies, Identity Protection risks rules, and phishing-resistant Multi-Factor Authentication (MFA).
• Identity Governance & Lifecycle: Automate user onboarding, transfers, and offboarding workflows using Entra ID Lifecycle Workflows and Access Packages.
• Privileged Access Management: Secure high-privilege administrative accounts using Microsoft Entra Privileged Identity Management (PIM), ensuring just-in-time and just-enough access.
• Protocol & Token Management: Configure application federation, Single Sign-On (SSO), and token custom claims using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Automation & Scripting: Develop and maintain automation scripts using Microsoft Graph PowerShell and Graph API to manage identity objects and generate custom compliance reports.
Required Qualifications
• Security Clearance: Active TS/SCI clearance required at the time of application. Must possess a current Counterintelligence (CI) Polygraph or be willing to take and pass one upon hire.
• Work Arrangement: Ability to work 100% on-site and reliably commute/travel to various work locations across DC, MD, and VA.
• Experience: 8+ years of engineering experience focused heavily on the Microsoft IAM platform.
• Core Systems: Deep technical knowledge of Active Directory Domain Services (AD DS), Group Policies (GPOs), and Microsoft Entra ID.
• Protocols: Strong understanding of Kerberos, NTLM, LDAP, SAML, and OIDC protocols.
• Automation: Proficiency with PowerShell and direct experience querying the Microsoft Graph API.
• Security Controls: Practical experience implementing Entra ID PIM, Conditional Access, and Role-Based Access Control (RBAC).
Preferred Qualifications
• Certifications: Microsoft Certified: Identity and Access Administrator Associate (SC-300) or Microsoft Certified: Cybersecurity Architect Expert (SC-100).
• DoD 8570/8140 Compliance: Hold an active IAM Level II or III baseline certification (e.g., Security+, CISSP, CISM).
• Cloud Security: Broad familiarity with the wider Microsoft Security ecosystem (Microsoft Defender for Identity, Entra Permissions Management).
• Infrastructure as Code: Experience managing Azure resources using Bicep, ARM templates, or Terraform.
Benefits & Perks
• Competitive health, dental, and vision insurance.
• 401(k) matching and profit-sharing plans.
• Bonus plans
• Travel/commuter assistance or mileage reimbursement policy for multi-site local travel (where applicable).
• Generous paid time off (PTO) and federal holiday schedule.
• Tuition assistance and dedicated budget for professional certifications (e.g., Microsoft, SANS, CISSP).
Location: On-site (Multiple locations across Washington D.C., Maryland, and Northern Virginia)
Employment Type: Full-time
Security Clearance: Active TS/SCI Required (CI Polygraph Eligible)
Salary Range: $165,000 – $225,000 / year (Dependent on experience, certifications, and polygraph status)
Job Summary
We are seeking an Identity and Access Management (IAM) Engineer specializing in the Microsoft ecosystem to design, secure, and maintain our enterprise identity infrastructure within classified environments. In this role, you will lead the implementation and support of identity services across secure networks. You will leverage Microsoft Entra ID and Azure services to enforce Least Privilege principles, optimize user lifecycles, and drive our transition toward a Zero Trust architecture.
This position requires 100% on-site work due to the secure nature of the environments. Candidates must be flexible to support multiple facility locations across the DC, MD, and VA (DMV) area.
Key Responsibilities
• On-Site & Facility Operations: Provide dedicated on-site engineering support across designated secure facilities in Washington D.C., Maryland, and Virginia.
• Entra ID Administration: Configure and maintain Microsoft Entra ID, including Entra ID Governance, App Registrations, and Enterprise Applications within secure cloud environments.
• Hybrid Identity Management: Manage and monitor hybrid directory architectures using Microsoft Entra Connect / Cloud Sync to synchronize on-premises Active Directory with the cloud.
• Conditional Access & MFA: Design, test, and deploy advanced Conditional Access policies, Identity Protection risks rules, and phishing-resistant Multi-Factor Authentication (MFA).
• Identity Governance & Lifecycle: Automate user onboarding, transfers, and offboarding workflows using Entra ID Lifecycle Workflows and Access Packages.
• Privileged Access Management: Secure high-privilege administrative accounts using Microsoft Entra Privileged Identity Management (PIM), ensuring just-in-time and just-enough access.
• Protocol & Token Management: Configure application federation, Single Sign-On (SSO), and token custom claims using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Automation & Scripting: Develop and maintain automation scripts using Microsoft Graph PowerShell and Graph API to manage identity objects and generate custom compliance reports.
Required Qualifications
• Security Clearance: Active TS/SCI clearance required at the time of application. Must possess a current Counterintelligence (CI) Polygraph or be willing to take and pass one upon hire.
• Work Arrangement: Ability to work 100% on-site and reliably commute/travel to various work locations across DC, MD, and VA.
• Experience: 8+ years of engineering experience focused heavily on the Microsoft IAM platform.
• Core Systems: Deep technical knowledge of Active Directory Domain Services (AD DS), Group Policies (GPOs), and Microsoft Entra ID.
• Protocols: Strong understanding of Kerberos, NTLM, LDAP, SAML, and OIDC protocols.
• Automation: Proficiency with PowerShell and direct experience querying the Microsoft Graph API.
• Security Controls: Practical experience implementing Entra ID PIM, Conditional Access, and Role-Based Access Control (RBAC).
Preferred Qualifications
• Certifications: Microsoft Certified: Identity and Access Administrator Associate (SC-300) or Microsoft Certified: Cybersecurity Architect Expert (SC-100).
• DoD 8570/8140 Compliance: Hold an active IAM Level II or III baseline certification (e.g., Security+, CISSP, CISM).
• Cloud Security: Broad familiarity with the wider Microsoft Security ecosystem (Microsoft Defender for Identity, Entra Permissions Management).
• Infrastructure as Code: Experience managing Azure resources using Bicep, ARM templates, or Terraform.
Benefits & Perks
• Competitive health, dental, and vision insurance.
• 401(k) matching and profit-sharing plans.
• Bonus plans
• Travel/commuter assistance or mileage reimbursement policy for multi-site local travel (where applicable).
• Generous paid time off (PTO) and federal holiday schedule.
• Tuition assistance and dedicated budget for professional certifications (e.g., Microsoft, SANS, CISSP).
group id: 91165009