IAM / Zero Trust Cybersecurity Engineer

Xtreme Inc

Washington, DC, United States

2 months ago

Apply on indeed.com

Prepare application

Role details

Contract type

Permanent contract

Employment type

Part-time (≤ 32 hours)

Experience level

Expert

Experience required

6 years minimum

Working hours

Regular working hours

Job source

indeed.com

Tech stack

Microsoft Azure Cloud Computing Security CompTIA Security+ Cyber Security Multi-Factor Authentication Identity and Access Management Role-Based Access Control Azure Active Directory Zero Trust Network Access Data Logging Okta Cyberark

+1 more

SailPoint

Job description

XSI is seeking an IAM / Zero Trust Cybersecurity Engineer to design, implement, and maintain identity and access controls for the cybersecurity engineering team supporting the Congressional Budget Office (CBO). This is a sustained part-time role that surges during IAM discovery, control implementation, validation, and documentation., * Design, implement, and maintain least-privilege access controls, RBAC, PAM, MFA, and authentication/authorization integrations across cloud, network, endpoint, and application environments.

Configure and manage Entra ID / Azure AD, conditional access policies, identity provider integrations, and cloud IAM.
Implement and govern privileged access using tools such as CyberArk, Delinea, Azure PIM, Okta, or SailPoint.
Conduct access reviews; remediate excessive or standing permissions; govern service accounts.
Drive MFA / passwordless rollout, group/role cleanup, identity logging, and audit evidence collection.
Enforce Zero Trust principles across cloud, network, and endpoint environments.

Requirements

Do you have experience in Zero Trust security?, * 6-10+ years of IAM, Zero Trust, and enterprise access control experience.

Hands-on experience with Entra ID / Azure AD, conditional access, RBAC, MFA, privileged access, identity provider integration, cloud IAM, and access reviews.
PAM experience with CyberArk, Delinea, Azure PIM, Okta, SailPoint, or equivalent (preferred).
Demonstrated implementation of access controls - not policy authorship alone., Preferred: Microsoft SC-300, AZ-500, SC-100; Okta; SailPoint; Security+, CISSP, CISM, or equivalent IAM/cloud security credentials.