Identity and Access Management (IAM) Engineer

• Relevant Microsoft certifications (e.g., Microsoft 365 Certified: Enterprise Administrator Expert, SC-300,

• Bachelor’s degree in computer science, Information Technology, or equivalent and 8 years of experience or Master’s with 6 plus years of general IT experience, preferably supporting system engineering. Additional years of experience may be substituted in lieu of degree.\n
• 5+ years of experience focusing on identity and access management, with demonstrated ownership of complex, enterprise-scale solutions.\n
• Experience in PIM and Azure AD Conditional Access policies.\n
• Hands-on experience with Microsoft identity solutions (Entra ID, AD FS, Microsoft 365, MIM).\n
• Proven experience in large-scale, multi-forest Active Directory and Entra ID architectures.\n
• Advanced knowledge of identity protocols (SAML, OAuth 2.0, OpenID Connect, WS-Federation, CBA).\n
• Strong experience with Azure AD B2B and B2C for external identity management.\n
• Proficiency in PowerShell and Graph API for identity management automation.\n
• Experience with Azure AD Connect, including custom synchronization rules.\n
• Working knowledge of with Zero Trust architecture and identity-related security best practices.\n
• Ability to communicate technical designs and risks to both technical and non-technical stakeholders.\n, * Experience in government or highly regulated industries.\n
• Knowledge of identity-related compliance standards and frameworks (e.g., NIST 800-53, NIST 800-63, and FISMA).\n
• Experience with Azure AD Verifiable Credentials and decentralized identity concepts.\n
• Understanding of biometric authentication methods and their Azure AD integration.\n

Leidos Digital Sector is seeking a Sr. Identity and Access Management (IAM) Engineer to lead complex identity management solutions for large-scale government digital transformation initiatives. The ideal candidate will have deep expertise in Microsoft identity technologies and a proven track record of implementing advanced enterprise-level identity solutions.\n \n \nCandidate MUST:\n \n Be a US Citizen or US Person who has lived in the United States for at least three consecutive years and have the ability to obtain a Public Trust level 4 clearance\n \n \nPrimary Responsibilities:\n \n \n

• Implement and maintain Microsoft Entra ID solutions, including multi-tenant and cross-tenant synchronization for complex organizations.\n
• Lead the execution of identity platform migrations (i.e. migration from on-premises Active Directory to Microsoft Entra ID Native authentication) including planning, risk assessment, cutover, and rollback strategies.\n
• Lead and implement advanced identity management solutions using Entra ID to optimize cost-efficiency and user experience.\n
• Design, build, and maintain custom identity management tools and automation for identity lifecycle processes (joiner/mover/leaver, provisioning, and access certification).\n
• Ensure identity solutions align with security, compliance, and business requirements, and partner with security, infrastructure, and compliance teams on design decisions and risk trade-offs.\n
• Support technical escalations for complex identity incidents and perform root cause analysis.\n
• Develop documentation, standards, and runbooks, and mentor junior engineers.\n
• Evaluate emerging Microsoft identity technologies and industry best practices and recommend adoption where they add value.\n