> Markdown version of [/jobs/ext/1242710-senior-cloud-iam-engineer-us-federal](https://www.wearedevelopers.com/jobs/ext/1242710-senior-cloud-iam-engineer-us-federal). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Cloud IAM Engineer (US Federal)

- **Company:** HR TECH JOE, LLC.
- **Location:** Reston, VA, United States (Remote available)
- **Experience:** Expert
- **Salary:** $148,200.0 - $264,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cloud Engineering, Cyber Security, Github, Identity and Access Management, Python (Programming Language), OAuth, OpenID, Role-Based Access Control, Cloud Services, Security Assertion Markup Language (SAML), Security Information and Event Management, Okta, Information Technology, Splunk, Workday
- **Published:** July 11, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=7d0a9142c751a2ae

## About the Role

TS/SCI w/CI Poly level security clearance. Applicants must have the ability to obtain and maintain a U.S. government-issued security clearance. An active TS/SCI w/CI Poly is preferred.5+ years as a cloud engineer, focused on IAM.Experience in centralizing authentication/authorization and RBAC/PBAC.Managing infrastructure as code using tools like GitHub and Terraform.Experience developing tools for automation in Python or other programming languages.Experience integrating cloud platforms with external tools like Okta, EntraID or similar for centralized authentication and SSO.Experience utilizing one or more SIEM tools (Splunk or similar) for log aggregation and analysis, threat playbooks, and auditing.Preferred DoD 8570/8140 compliant with at least IAT Level II certification, including a current Computing Environment (CE) credential and one approved specialty certification (e.g., CompTIA CySA+, GICSP, CASP+).Familiarity with NIST 800-53 and DoD/Intel control
frameworks.Bachelor's degree or higher in computer science, cybersecurity, or comparable work/educational experience.Familiarity with identity governance workflows, user lifecycle management (joiners, movers, leavers).CompensationPrimary Location: USA.VA.RestonPrimary Location Base Pay Range: $163,800 USD - $245,800 USDAdditional US Location(s) Base Pay Range: $148,200 USD - $264,000 USDFlexible WorkWith Flex Work, we combine the best of both worlds: in-person time and remote. Our approach enables teams to deepen connections, maintain a strong community, and do their best work. We don't set a required number of office days each week; instead, we spend at least 50% of our time each quarter in the office or in the field with customers, prospects, and partners (depending on role). Those in remote "home office" roles also have the opportunity to join in our offices for important moments that matter.Equal OpportunityPursuant to applicable Fair Chance law, Workday, Government.QualificationsBasic Qualifications:This role may require a TS/SCI w/CI Poly level security clearance. Applicants must have the ability to obtain and maintain a U.S. government-issued security clearance. An active TS/SCI w/CI Poly is preferred.5+ years as a cloud engineer, focused on IAM.Experience in centralizing authentication/authorization and RBAC/PBAC.Managing infrastructure as code using tools like GitHub and Terraform.Experience developing tools for automation in Python or other programming languages.Experience integrating cloud platforms with external tools like Okta, EntraID or similar for centralized authentication and SSO.Experience utilizing one or more SIEM tools (Splunk or similar) for log aggregation and analysis, threat playbooks, and auditing.Preferred DoD 8570/8140 compliant with at least IAT Level II certification, including a current Computing Environment (CE) credential and one approved specialty certification (e.g., CompTIA CySA+, GICSP,
CASP+).Familiarity with NIST 800-53 and DoD/Intel control frameworks.Bachelor's degree or higher in computer science, cybersecurity, or comparable work/educational experience.Familiarity with identity governance workflows, user lifecycle management (joiners, movers, leavers).CompensationPrimary Location: USA.VA.RestonPrimary Location Base Pay Range: $163,800 USD - $245,800 USDAdditional US Location(s) Base Pay Range: $148,200 USD - $264,000 USDFlexible WorkWith Flex Work, we combine the best of both worlds: in-person time and remote. Our approach enables teams to deepen connections, maintain a strong community, and do their best work. We don't set a required number of office days each week; instead, we spend at least 50% of our time each quarter in the office or in the field with customers, prospects, and partners (depending on role). Those in remote "home office" roles also have the opportunity to join in our offices for important moments that matter.Equal

## Description

security requirements, all Workday personnel working on these contracts must be U.S. citizens (naturalized or native).Employees may be required to work on site at client locations in the DC, MD, and VA (DMV) area.We are looking for a cloud engineer who focuses on managing entitlements and permissions in a cloud services environment (AWS, Azure/EntraID, or GCP). You will be one of our IAM engineers working to automate identity administration, authentication, and authorization to resources in the air-gapped network. The ideal candidate will understand infrastructure and compliance as code, use CI/CD pipelines, and be familiar with standard federation protocols (OAuth, OIDC, SAML, SCIM). You will collaborate with other teams in cloud engineering and the broader Cybersecurity organization as we build a new organization at Workday for the unique requirements of the DoD and Intel agencies of the U.S. Government.QualificationsBasic Qualifications:This role may require a, will consider for employment qualified applicants with arrest and conviction records. Workday is an Equal Opportunity Employer including individuals with disabilities and protected veterans.#J-18808-Ljbffr, U.S. Federal Government. Due to federal security requirements, all Workday personnel working on these contracts must be U.S. citizens (naturalized or native).Employees may be required to work on site at client locations in the DC, MD, and VA (DMV) area.We are looking for a cloud engineer who focuses on managing entitlements and permissions in a cloud services environment (AWS, Azure/EntraID, or GCP). You will be one of our IAM engineers working to automate identity administration, authentication, and authorization to resources in the air-gapped network. The ideal candidate will understand infrastructure and compliance as code, use CI/CD pipelines, and be familiar with standard federation protocols (OAuth, OIDC, SAML, SCIM). You will collaborate with other teams in cloud engineering and the broader Cybersecurity organization as we build a new organization at Workday for the unique requirements of the DoD and Intel agencies of the U.S., OpportunityPursuant to applicable Fair Chance law, Workday will consider for employment qualified applicants with arrest and conviction records. Workday is an Equal Opportunity Employer including individuals with disabilities and protected veterans.#J-18808-Ljbffr


## Related Videos

- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Shipping Faster with Less: Render on Cloud Hosting, AI Workloads, and the Future of DevOps](https://www.wearedevelopers.com/videos/1894-shipping-faster-with-less-render-on-cloud-hosting-ai-workloads-and-the-future-of-devops)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)
- [Beyond the 9–5: Designing Work Around Humans](https://www.wearedevelopers.com/videos/1321-beyond-the-9-5-designing-work-around-humans)
- [Advanced Cypress: custom assertions and tasks](https://www.wearedevelopers.com/videos/790-advanced-cypress-custom-assertions-and-tasks)

## Related Articles

- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Does The Tech Industry Have The Best Work-life Balance?](https://www.wearedevelopers.com/magazine/427-does-the-tech-industry-have-the-best-work-life-balance)
- [Best Paying Remote Jobs](https://www.wearedevelopers.com/magazine/255-best-paying-remote-jobs)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)