> Markdown version of [/jobs/ext/2847227-iam-zero-trust-cybersecurity-engineer](https://www.wearedevelopers.com/jobs/ext/2847227-iam-zero-trust-cybersecurity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM / Zero Trust Cybersecurity Engineer

- **Company:** Xtreme Inc
- **Location:** United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Azure, Cloud Computing Security, CompTIA Security+, Cyber Security, Multi-Factor Authentication, Identity and Access Management, Role-Based Access Control, Azure Active Directory, Zero Trust Network Access, Data Logging, Okta, Cyberark, SailPoint
- **Published:** September 11, 2026
- **Apply:** https://www.thejobnetwork.com/job/3ddffb6e-757d-44a9-83a0-48957b623e07/iam-zero-trust-cybersecurity-engineer

## About the Role

* 6-10+ years of IAM, Zero Trust, and enterprise access control experience.
 * Hands-on experience with Entra ID / Azure AD, conditional access, RBAC, MFA, privileged access, identity provider integration, cloud IAM, and access reviews.
 * PAM experience with CyberArk, Delinea, Azure PIM, Okta, SailPoint, or equivalent (preferred).
 * Demonstrated implementation of access controls - not policy authorship alone.

Certifications

Preferred: Microsoft SC-300, AZ-500, SC-100; Okta; SailPoint; Security+, CISSP, CISM, or equivalent IAM/cloud security credentials.

## Description

XSI is seeking an IAM / Zero Trust Cybersecurity Engineer to design, implement, and maintain identity and access controls for the cybersecurity engineering team supporting the Congressional Budget Office (CBO). This is a sustained part-time role that surges during IAM discovery, control implementation, validation, and documentation.

What you'll do

 * Design, implement, and maintain least-privilege access controls, RBAC, PAM, MFA, and authentication/authorization integrations across cloud, network, endpoint, and application environments.
 * Configure and manage Entra ID / Azure AD, conditional access policies, identity provider integrations, and cloud IAM.
 * Implement and govern privileged access using tools such as CyberArk, Delinea, Azure PIM, Okta, or SailPoint.
 * Conduct access reviews; remediate excessive or standing permissions; govern service accounts.
 * Drive MFA / passwordless rollout, group/role cleanup, identity logging, and audit evidence collection.
 * Enforce Zero Trust principles across cloud, network, and endpoint environments.


## Related Videos

- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)