IAM / Zero Trust Cybersecurity Engineer
HybridWashington, District of Columbia, United States or Washington, United States
Job Summary
Design, implement, and maintain least-privilege access controls, RBAC, PAM, MFA, and authentication/authorization integrations across cloud, network, endpoint, and application environments. Configure Entra ID / Azure AD, conditional access policies, and identity provider integrations while governing privileged access using tools like CyberArk, Delinea, Azure PIM, Okta, or SailPoint. Conduct access reviews, remediate excessive permissions, and enforce Zero Trust principles across all environments. This sustained part-time role surges during IAM discovery, control implementation, validation, and documentation for the Congressional Budget Office cybersecurity engineering team.
Required Qualifications
- 6–10+ years of IAM, Zero Trust, and enterprise access control experience
- Hands-on experience with Entra ID / Azure AD, conditional access, RBAC, MFA, privileged access, identity provider integration, cloud IAM, and access reviews
- Demonstrated implementation of access controls — not policy authorship alone
Desired Qualifications
- PAM experience with CyberArk, Delinea, Azure PIM, Okta, SailPoint, or equivalent (preferred)
- Microsoft SC-300, AZ-500, SC-100; Okta; SailPoint; Security+, CISSP, CISM, or equivalent IAM/cloud security credentials
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.