Senior Cybersecurity Engineer (IAM)

• Implement and operate enterprise IAM security controls across a multi-tenant/multi-domain hybrid environment spanning Entra ID, Okta, and Active Directory - including PAM, JIT access, conditional access, and MFA policy enforcement (not day-to-day user/group provisioning or account administration)
• Execute IAM designs defined by security architecture, translating architectural standards into working security configurations, policies, and integrations
• Maintain and enforce IAM-related security policies, standards, and best practices in alignment with regulatory and compliance requirements (CMMC, NIST 800-171/800-172, and other applicable frameworks)
• Configure and tune identity security controls - access policies, privileged access workflows, authentication requirements - protecting users, systems, applications, and data across Entra ID, Okta, and AD environments
• Serve as 2nd-level SOC escalation point for critical identity-related security incidents
• Investigate identity-related security anomalies using platform reporting, network traffic, log files, and automated alerts
• Support audit and assessment activities by maintaining compliant configurations and evidence for IAM controls
• Automate recurring IAM security operations tasks
• Maintain system and process documentation, including compliance-relevant control documentation
• Provide off-hours support as needed (infrequent)
• Cover other assignments as needed

• Working knowledge of Zero Trust, RBAC, and ABAC
• Working knowledge of regulatory/compliance frameworks relevant to IAM (CMMC, NIST 800-171/800-172, or similar)
• Understanding of network security fundamentals: boundary protection, segmentation, firewalls, endpoint security, threat hunting, data protection
• Self-starter, strong written/verbal communication, comfortable with minimal supervision and shifting priorities
• Ability to travel up to 10%, * Typically, 8 years of hands-on IAM security engineering experience with a Bachelor’s degree in Computer Science, Information Systems or related field plus; 4 with Master’s. IAM security engineering experiences includes implementing access controls, privileged access management, and authentication policy, rather than general user/account administration.
• Hands-on experience securing and administering Entra ID, Okta, and Active Directory identity infrastructure in a hybrid environment
• Solid experience in Privileged Access Management (PAM), Self-Service Password Management, and Just-In-Time (JIT) access
• Current CISSP, CISM, or equivalent certification
• Solid MFA and access-protection implementation experience
• Solid Microsoft Azure/M365 experience
• U.S. Citizen (required)

Preferred qualifications, KSAs, and experience:

• Experience implementing an IAM governance platform such as Saviynt, SailPoint, or similar
• Experience supporting CMMC assessments or audits
• Familiarity with GDPR, SOX, ISO 27001
• Entra/Azure GCC High exposure

Our health and welfare benefits are designed to support you and your priorities. Offerings include:

• Health, dental, and vision insurance
• Paid time off and holidays
• Retirement benefits (including 401(k) matching)
• Educational reimbursement
• Parental leave
• Employee stock purchase plan
• Tax-saving options
• Disability and life insurance
• Pet insurance

Note: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O’Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.

Amentum is a global leader in advanced engineering and innovative technology solutions, trusted by the United States and its allies to address their most significant and complex challenges in science, security and sustainability. Our people apply undaunted curiosity, relentless ambition and boundless imagination to challenge convention and drive progress. Our commitments are underpinned by the belief that safety, collaboration and well-being are integral to success. Headquartered in Chantilly, Virginia, we have approximately 50,000 employees in more than 70 countries across all 7 continents.