> Markdown version of [/jobs/ext/1836151-clouid-identity-access-management-soceur](https://www.wearedevelopers.com/jobs/ext/1836151-clouid-identity-access-management-soceur). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # ClouId Identity & Access Management - SOCEUR - **Company:** Caci Inc - **Location:** United States - **Experience:** Experienced - **Salary:** $105,100.0 - $231,100.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Application Programming Interfaces (APIs), Artificial Intelligence, C++ (Programming Language), Cloud Computing, Cloud Computing Security, Cyber Security, Software Debugging, Multi-Factor Authentication, Identity and Access Management, Python (Programming Language), OAuth, OpenID, Public Key Infrastructure, Role-Based Access Control, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), Smart Cards, Software Engineering, Systems Integration, Google Cloud, Cloud Platform System, Okta, Infrastructure as Code (IaC), Backend, Customer Identity Access Management, Information Technology, Low Latency, Gsuite, Terraform - **Published:** July 16, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9034927/clouid-identity-access-management-soceur ## About the Role * Must be a US Citizen possessing an active TS/SCI security clearance. * Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent practical experience). * 5+ years of experience in backend software engineering or security engineering, with at least 3+ years specifically focused on designing and implementing Identity and Access Management (IAM) systems on a major cloud platform (GCP preferred). * Deep expertise in identity federation protocols (SAML, OAuth, OIDC) and experience integrating with identity providers (e.g., Keycloak, Azure AD, Okta). * Hands-on experience with Google Cloud IAM, Google Cloud Identity, and Google Workspace, including service accounts, workload identity, and organization policies. * Experience with Infrastructure as Code (IaC), specifically using Terraform to manage IAM resources. * Strong proficiency in a language like Python, Go, or C++ for building scalable backend systems. * Experience with Public Key Infrastructure (PKI) and integrating smart card authentication (CAC/PIV). * Google Cloud Professional Cloud Security Engineer certification. * One of the following advanced security or identity certifications: CISSP, CCSP, or Certified Identity and Access Manager (CIAM). * Google Workspace Professional Collaboration Engineer certification. * * Experience using AI-assisted tools for secure software development and debugging. * * Experience working in a high-availability, low-latency distributed services environment. ## Description As a CACI Cloud Identity & Access Management (IAM) Engineer to architect, build, and maintain the highly available authorization infrastructure for the Special Operations Command Europe (SOCEUR) Hybrid Threat Action Platform (HTAP) ecosystem on Google Cloud Platform (GCP). This role sits inside the HTAP program team and is responsible for designing the core identity federation, access policies, and security boundaries that protect mission-critical data. The individual will architect distributed authorization systems, broker identities between unclassified and classified environments, and implement a zero-trust security model. The individual will interact regularly with cybersecurity architects, application developers, and platform engineers to ensure secure, auditable, and least-privilege access across all systems. * Architect and scale large-scale, distributed cloud-native authorization services on GCP to support massive query loads and enforce granular access control. * Lead the design and implementation of identity federation between on-premises/external identity providers and Google Cloud Identity, using protocols like SAML and OIDC. * Integrate and manage identity platforms such as Keycloak with Google Workspace to implement strict Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA), including CAC/PIV integration. * Design, manage, and audit IAM policies, roles, and bindings as code using Terraform to ensure an automated, repeatable, and secure identity lifecycle. * Engineer and enforce access control strategies for multi-level security environments, managing identity and access across different security domains (e.g., Unclassified to Secret). * Develop and implement context-aware access policies and zero-trust principles to protect sensitive data and APIs. * Conduct regular security assessments and audits of IAM policies, access permissions, and service account usage to identify and remediate risks. * Collaborate with the security operations team to provide IAM-specific context during incident response and threat analysis. * ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Advanced Cypress: custom assertions and tasks](https://www.wearedevelopers.com/videos/790-advanced-cypress-custom-assertions-and-tasks) - [The Open-source Java SDK for Multi-Cloud Development - Sandeep Pal](https://www.wearedevelopers.com/videos/2113-the-open-source-java-sdk-for-multi-cloud-development-sandeep-pal) ## Related Articles - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)