ECS is seeking an
Identity and Access Management Engineer to work in our
Fairfax, VA office.
We are seeking a proactive and technical Identity and Access Management (IAM) Engineer to join our team. In this role, you will be responsible for delivering end-to-end identity governance solutions, serving as a bridge between business objectives and technical implementation.
You will work within infrastructure and engineering teams to advance our Identity Governance and Administration platforms. This position requires a "full-stack" mindset: you will handle everything from technical design and "birthright" access policies to the hands-on development of custom connectors, APIs, and automated provisioning workflows.
Key Responsibilities:Engineering & Development
Platform Implementation: Implement, configure, and upgrade enterprise SailPoint (IdentityIQ/IdentityNow) solutions based on functional specifications.
Custom Integration: Develop modifications and wrappers for IAM APIs and extend custom connectors, plug-ins, and SCIM/REST integrations for diverse target systems (SaaS, HRMS, IaaS).
Automation: Identify opportunities to automate and create organizational value. Develop efficient scripting and workflows.
Identity Lifecycle: Engineer automated provisioning and de-provisioning services for application on-boarding and off-boarding, ensuring a seamless user experience.
Governance & Security
Access Control: Design and implement Role-Based Access Control (RBAC) models, Separation of Duties (SoD) policies, and organization access review strategies.
Compliance: Ensure solutions adhere to regulatory standards (e.g., NIST 800-53, FedRAMP, ISO 27001) and support access certification campaigns.
Security Best Practices: Apply secure coding practices and maintain a strong understanding of SAML, OIDC, OAuth, and PKI protocols.
Operations & Support
System Maintenance: Support and maintain IAM environments, including performance tuning, health monitoring, and troubleshooting IGA rules and workflows.
Incident Management: Assist in monitoring, troubleshooting, and providing problem resolutions for end-user issues and platform incidents.
Reporting: Generate metrics and reporting on identity health, access reviews, and compliance status.
Collaboration
Team Partnership: Work collaboratively with cross-functional technical leads and business stakeholders to facilitate application integration.
Documentation: Create comprehensive technical documentation, including system diagrams, process flows, and operational procedures.
- Bachelor's degree and 5 years of experience or the equivalent job experience.
- Extensive hands-on experience with SailPoint (IdentityIQ or IdentityNow).
- Strong knowledge of identity lifecycle management, RBAC, and access governance.
- Experience with scripting and automation (Python, PowerShell, Bash).
- Deep understanding of Active Directory, Entra AD, and LDAP systems.
- Strong problem-solving skills with the ability to take initiative (self-starter).
- Excellent written and spoken English communication skills.
- Ability to work effectively in a virtual, cross-time-zone environment.
- Business outcomes mindset with attention to detail.
