> Markdown version of [/jobs/ext/4509462-iam-zero-trust-cybersecurity-engineer](https://www.wearedevelopers.com/jobs/ext/4509462-iam-zero-trust-cybersecurity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM / Zero Trust Cybersecurity Engineer

- **Company:** Xtreme Inc
- **Location:** Washington, DC, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Azure, Cloud Computing Security, CompTIA Security+, Cyber Security, Multi-Factor Authentication, Identity and Access Management, Role-Based Access Control, Azure Active Directory, Zero Trust Network Access, Data Logging, Okta, Cyberark, SailPoint
- **Published:** November 2, 2026
- **Apply:** https://www.juju.com/job/16_2ddfcb284

## About the Role

* 6-10+ years of IAM, Zero Trust, and enterprise access control experience.
 * Hands-on experience with Entra ID / Azure AD, conditional access, RBAC, MFA, privileged access, identity provider integration, cloud IAM, and access reviews.
 * PAM experience with CyberArk, Delinea, Azure PIM, Okta, SailPoint, or equivalent (preferred).
 * Demonstrated implementation of access controls - not policy authorship alone.

Certifications

Preferred: Microsoft SC-300, AZ-500, SC-100; Okta; SailPoint; Security+, CISSP, CISM, or equivalent IAM/cloud security credentials.

## Description

XSI is seeking an IAM / Zero Trust Cybersecurity Engineer to design, implement, and maintain identity and access controls for the cybersecurity engineering team supporting the Congressional Budget Office (CBO). This is a sustained part-time role that surges during IAM discovery, control implementation, validation, and documentation.
What you'll do

 * Design, implement, and maintain least-privilege access controls, RBAC, PAM, MFA, and authentication/authorization integrations across cloud, network, endpoint, and application environments.
 * Configure and manage Entra ID / Azure AD, conditional access policies, identity provider integrations, and cloud IAM.
 * Implement and govern privileged access using tools such as CyberArk, Delinea, Azure PIM, Okta, or SailPoint.
 * Conduct access reviews; remediate excessive or standing permissions; govern service accounts.
 * Drive MFA / passwordless rollout, group/role cleanup, identity logging, and audit evidence collection.
 * Enforce Zero Trust principles across cloud, network, and endpoint environments.