IAM/Zero Trust Cybersecurity Engineer

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Design, develop, and sustain least-privilege access controls, RBAC, PAM, MFA, and authentication/authorization integrations across cloud, network, endpoint, and application settings.

• Configure and oversee Entra ID / Azure AD, conditional access policies, identity provider integrations, and cloud IAM.

• Implement and manage privileged access utilizing tools such as CyberArk, Delinea, Azure PIM, Okta, or SailPoint.

• Perform access reviews; rectify excessive or standing permissions; manage service accounts.

• Spearhead MFA / passwordless deployment, group/role maintenance, identity logging, and audit evidence collection.

• Apply Zero Trust principles throughout cloud, network, and endpoint environments.

• Collaborate with the Congressional Budget Office (CBO) cybersecurity engineering team.

⛳️ Requirements

• 6–10+ years of experience in IAM, Zero Trust, and enterprise access control.

• Practical experience with Entra ID / Azure AD, conditional access, RBAC, MFA, privileged access, identity provider integration, cloud IAM, and access reviews.

• PAM experience with CyberArk, Delinea, Azure PIM, Okta, SailPoint, or similar (preferred).

• Proven track record of implementing access controls—beyond policy authorship alone.

• Preferred certifications include Microsoft SC-300, AZ-500, SC-100; Okta; SailPoint; Security+, CISSP, CISM, or equivalent IAM/cloud security credentials.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Generous retirement savings plan with company matching.

• Flexible work hours and remote work options.

• Professional development and training opportunities.