8+ years in identity and access management or security engineering.
Hands-on experience with OIDC, SAML, or federation.
Proficient in role-based access control (RBAC) design and secrets management.
Responsibilities
Integrate services with enterprise identity using OIDC and PingFederate.
Implement role-based access control and enforce policies for users and service accounts.
Manage the lifecycle of API keys and secrets, including their rotation and revocation.
Ensure tenant and project isolation while separating approval duties.
Conduct access reviews and maintain auditable onboarding and offboarding processes.
Benefits
Medical, dental, and vision insurance starting on your first day, with Apavo covering 90% effective January 1, 2027.
401(k) with a 3.5% employer match, starting January 1, 2027.
20 days of paid time off plus 11 paid federal holidays.
Up to $3,000 a year in training and certification reimbursement.
Parking reimbursement.
Full Job Description
About the Role
Apavo is hiring an Identity and Access Engineer to secure who and what can use new AI services for an Intelligence Community customer. You'll design the identity, policy, and key controls that keep users, services, and data properly separated.
What You'll Do
Integrate services with enterprise identity using OIDC and PingFederate or similar providers.
Implement role-based access control and policy enforcement for users and service accounts.
Manage the lifecycle of API keys and secrets, including rotation and revocation.
Keep tenants and projects isolated, and separate approval duties.
Run access reviews and make onboarding and offboarding auditable.
Requirements
Required Qualifications
Active TS/SCI clearance.
8+ years in identity and access management or security engineering.
Hands-on OIDC, SAML, or federation experience.
Experience with RBAC design and secrets management.
Preferred Qualifications
PingFederate experience.
Experience with zero trust architectures.
A DoD 8570/8140 baseline certification.
Benefits
Medical, dental, and vision insurance starting on your first day, with Apavo covering 90% effective January 1, 2027.
401(k) with a 3.5% employer match, starting January 1, 2027.
20 days of paid time off plus 11 paid federal holidays.
Up to $3,000 a year in training and certification reimbursement.
