> Markdown version of [/jobs/ext/3700741-iam-identity-access-management-engineer](https://www.wearedevelopers.com/jobs/ext/3700741-iam-identity-access-management-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM (Identity & Access Management) Engineer

- **Company:** Peraton Inc
- **Location:** Chantilly, VA, United States
- **Experience:** Expert
- **Salary:** $112,000.0 - $179,000.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Cloud Computing, Cyber Security, Identity and Access Management, Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, Role-Based Access Control, Zero Trust Network Access, Security Assertion Markup Language (SAML), Single Sign-On, Okta, Gitlab, Kubernetes, Enterprise Integration, Servicenow
- **Published:** October 12, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9233679/iam-identity-access-management-engineer

## About the Role

The ideal candidate brings strong IAM engineering experience and is comfortable working across identity platforms, cloud infrastructure, applications, security controls, and automation. This role offers the opportunity to build and operate identity capabilities that support both human users and machine/workload identities at scale., * Active TS/SCI clearance with CI Polygraph.

 * Approximately 6-8 years of experience in IAM, cybersecurity, directory services, security engineering, platform engineering, or a related discipline.
 * 6 years' of experience with a BS/BA, an additional 4 years' may be considered in lieu of a degree.
 * Demonstrated experience with identity federation, SSO, OAuth/OIDC, SAML, RBAC, and enterprise identity systems.
 * Experience integrating identity and access services with cloud, applications, or Kubernetes environments.
 * Experience troubleshooting complex authentication, authorization, token, and federation issues.
 * Working knowledge of privileged-access management and identity lifecycle controls.
 * Strong scripting and automation skills.
 * Strong analytical, troubleshooting, documentation, and communication skills.

Desired Qualifications

 * Experience with Keycloak.
 * Experience with AWS IAM and federated-role integration.
 * Experience with Kubernetes RBAC.
 * Experience with GitLab identity integration.
 * Experience with ServiceNow identity or workflow integration.
 * Experience with Zero Trust architectures.
 * Experience supporting classified or multi-domain identity environments.
 * Experience automating identity lifecycle and entitlement management.

## Description

We are seeking Identity & Access Management (IAM) Engineers to design, automate, operate, and sustain identity and access services across a complex, highly secure platform environment., Identity Federation & Single Sign-On

 * Integrate platform services with enterprise identity, token, and directory services.
 * Design, operate, and integrate Keycloak or equivalent identity services.
 * Implement and troubleshoot OAuth/OIDC, SAML, LDAP, and related identity-federation patterns as applicable.
 * Maintain reliable SSO across approved platform services, applications, and environments.
 * Troubleshoot federation and authentication flows across interconnected systems and identity providers.

Authorization & Entitlements

 * Design and maintain Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) patterns for users, tenant administrators, privileged users, and services.
 * Integrate identity and authorization services with GitLab, Kubernetes, mission applications, ServiceNow, and federated AWS access.
 * Design and support workload and service-identity patterns for pipelines, automation, APIs, and platform services.
 * Support access reviews, access recertification, and separation-of-duties requirements.
 * Ensure identity and entitlement models align with established security and access-control requirements.

Automation & Identity Operations

 * Automate user, group, role, and entitlement lifecycle activities where practical.
 * Support privileged-access workflows and elevated-role approval processes.
 * Troubleshoot authentication, authorization, token, and federation issues escalated from Tier 2 support.
 * Maintain identity-service monitoring, documentation, recovery procedures, and operational support processes.
 * Identify opportunities to improve identity lifecycle management and reduce manual access-management activities through automation.

Platform & Security Integration

 * Collaborate with cloud, Kubernetes, platform, application, infrastructure, and cybersecurity teams to integrate identity capabilities across the environment.
 * Support identity requirements for shared services, tenant environments, applications, and automated workloads.
 * Evaluate identity and access impacts of new services, platform changes, and evolving architecture.
 * Support secure identity patterns across highly restricted and multi-domain environments.