> Markdown version of [/jobs/ext/2708255-iam-architect](https://www.wearedevelopers.com/jobs/ext/2708255-iam-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IAM Architect - **Company:** CACI International Inc. - **Location:** Arlington, VA, United States - **Salary:** $131,800.0 - $290,000.0 - **Contract:** Permanent contract - **Skills:** Adobe Analytics, Microsoft Access, User Authentication, Microsoft Azure, Business Software, Identity and Access Management, Kerberos (Protocol), OAuth, OpenID, Public Key Infrastructure, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Security Assertion Markup Language (SAML), Single Sign-On, Smart Cards, Web Services, Scripting, SailPoint - **Published:** September 4, 2026 - **Apply:** https://www.techcareers.com/job.asp?id=3377314600&tx=VT5954TYZ&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54 ## About the Role Ability to obtain Department of Homeland Security (DHS) Entry On Duty (EOD) - Active EOD preferred * BA/BS + 10 years of applicable experience; AA + 15 years' applicable experience * Experience in the Identity space with a background in identity management tools * Strong knowledge of HSPD12 and implementation of government smart card authentication * Expert knowledge of authentication with SAML, OAuth, OpenID, WSO2, and Kerberos * Prior experience in providing RBAC solutions for clouds solutions (e.g. Azure) * Strong scripting and automation abilities including PowerShell * Understanding of Microsoft Azure PIM, Access Reviews, Service Principles, Managed Identities and ABAC * Strong knowledge of enterprise PKI integration with SCEP and ACME clients * Experience in creating technical architecture documentation * Strong communication and written skills . Desired: ITILv3 or v4 Foundation's certification * Previous DHS or DoD experience * Microsoft Azure Fundamentals * CompTIA A+, or Network+, or SecurityExperience with Azure Cloud, scripting, and automation ## Description CACI is seeking a skilled SailPoint Identity and Access Management (IAM) Architect to join a dynamic, high-performing team. This team is responsible for operating and maintaining an IdentityIQ platform for a government customer. As an IAM architect, you will provide technical leadership and guidance to program managers and key stakeholders, focusing on enterprise-level projects and solutions. In this capacity, the IAM Architect will design solutions that are to be executed by the IAM engineer team. The Architect plays a pivotal role on the team, helping to deliver next-generation IAM services. The responsibilities include defining IAM solutions aimed at reducing organizational risk, increasing resiliency, and supporting the acceleration of business initiatives. The IAM Architect will work collaboratively alongside Microsoft Azure, Network, and Security Architects to ensure comprehensive integration and alignment across platforms. Additionally, the Architect will coordinate with vendors to evaluate, test, and implement new technology solutions to enhance the IAM environment. Responsibilities: * Design IAM solutions to support PIV/Certificate Base Authentication, FIDO 2. * Facilitate and support IAM integration into business applications and third parties, including Single Sign On enablement using modern protocols (SAML, OAuth, Open ID Connect) * Collaborate with customers to define organization constructs/naming conventions and user access roles * Provide guidance with the development of process and workflows to support IAM operation activities such as user onboarding, user lifecycle management and privilege access management * Engage with, and advise stakeholders within the business on Identity and Access Management best practices * Define, improve, and support Azure Entra ID, Certificate Lifecycle Management and Privileged Access Management within the organization * Identify areas for delivery of automated solutions (e.g. onboarding/offboarding) and maturation of existing process. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 210: AI Agents Are Go! Is MCP Dead? LLMs Crack Anonymity](https://www.wearedevelopers.com/magazine/709-dev-digest-210-ai-agents-are-go-is-mcp-dead-llms-crack-anonymity)