Design, implement, and operate identity, credential, and access management (ICAM) and public key infrastructure (PKI) capabilities
Engineering and operating ICAM services, including authentication, authorization, federation, and single sign-on for platform applications
Implementing and maintaining PKI, including certificate issuance, renewal, revocation, and key lifecycle management
Integrating Personal Identity Verification (PIV) card-based authentication in accordance with HSPD-12 and FIPS 201
Configuring and managing cloud identity and access management (AWS IAM), including roles, policies, and least-privilege access
Applying federal identity standards and frameworks to platform design and operations
Advancing zero-trust principles across identity and access controls
Automating identity and access provisioning through infrastructure as code (Terraform)
Producing technical documentation and translating complex identity and security concepts for stakeholders
Working with government partners and application teams to meet security, compliance, and access requirements

Bachelor's and 3+ years of experience; relevant experience may be substituted for education
Hands-on experience with identity and access management (IAM) and/or public key infrastructure (PKI) in an enterprise or cloud environment
Working knowledge of authentication and authorization protocols (e.g., SAML, OAuth 2.0, OIDC, LDAP) and certificate management
Familiarity with federal identity standards such as PIV / HSPD-12, FIPS 201, or NIST SP 800-63
Must be able to obtain and maintain a U.S. Public Trust / suitability determination

PKI / IAM Security Engineer

Key skills