Principal Cloud IAM Engineer (US Federal)

Description

The company is a Fortune 500 firm that offers a cloud platform for managing people, money, and agents. This team serves U.S. federal agencies as they modernize employee lifecycle and finance operations.

The team is building a new organization focused on DoD and intelligence agency needs and is expanding into the U.S. Government air-gapped classified cloud environment.

You would join the IAM engineers and work with cloud engineering and the wider cybersecurity group on government work.

The team values collaboration, follow-through, and integrity, and expects clear thinking and accountability.

Responsibilities

• Automate identity administration, authentication, and authorization for resources in the air-gapped network.
• Manage entitlements and permissions in a cloud services environment on AWS, Azure/EntraID, or GCP.
• Build and maintain infrastructure and compliance as code delivered through CI/CD pipelines.
• Coordinate identity controls with cloud engineering and the cybersecurity organization.

Requirements

• US citizenship is required.
• 8+ years as a cloud engineer focused on IAM.
• Experience centralizing authentication and authorization, including RBAC and PBAC.
• Experience managing infrastructure as code with tools such as GitHub and Terraform.
• Experience building automation tools in Python or another programming language.
• Experience connecting cloud platforms with external tools such as Okta, EntraID, or similar for central authentication and SSO.
• Experience with a SIEM tool such as Splunk or similar for log aggregation, analysis, threat playbooks, and auditing.
• Familiarity with OAuth, OIDC, SAML, and SCIM federation protocols is essential.
• Familiarity with NIST 800-53 and DoD and Intel control frameworks.
• Familiarity with identity governance workflows and user lifecycle management (joiners, movers, leavers).
• Bachelor's degree or higher in computer science, cybersecurity, or comparable work or education experience.
• Preferred: DoD 8570/8140 compliance with at least IAT Level II, including a current Computing Environment (CE) credential and one approved specialty certification (e.g., CompTIA CySA+, GICSP, CASP+).
• Preferred: an active TS/SCI w/CI Poly security clearance.

Conditions

Contracts require all personnel to be US citizens, naturalized or native, due to federal security rules.

You may be required to work on site at client locations in the DC, MD, and VA (DMV) area.

This role may require a TS/SCI w/CI Poly security clearance, so you must be able to obtain and maintain one.

Flex work means at least half (50%) of your time each quarter is spent in the office or in the field with customers, prospects, and partners, depending on role. Remote home-office roles can also visit offices for key moments.

Primary location USA.VA.Reston base pay is $191,500 USD to $287,300 USD. Additional US locations base pay is $173,300 USD to $309,600 USD.

Pay depends on geography, experience, skills, job duties, and business need. Recruiters can share more during hiring.

Equal opportunity employer including individuals with disabilities and protected veterans, and arrest and conviction records are considered under Fair Chance law.

Benefits

• Eligible for the company Bonus Plan or a role-specific commission or bonus.
• May be eligible for annual refresh stock grants.
• Comprehensive benefits package.