IAM Engineer

SOSi sosi.com Open · verified Oct 24, 2026

Remote United States Full-time Mid-level Security Engineering

At a glance

Mid-level Security Engineering role at SOSi. Remote, United States · full-time · $89,696–$186,293 base.

SalaryStated by SOSi

$89,696 – $186,293

Base salary for this role, in USD per year, as published in the posting.

RoleSecurity Engineering

SeniorityMid-level

LocationUnited States

WorkplaceRemote

EmploymentFull-time

Base pay$89,696–$186,293

PostedJun 29, 2026 · 3mo ago

Role brief

remoteroles summary, based on the employer's posting.

What you'll do

Build and maintain IAM controls for cloud and on-premises systems, covering authentication and access permissions
Apply Zero Trust and role-based controls to secure systems supporting mission requirements
Connect IAM with Microsoft Entra ID, PKI, and Common Access Card authentication
Automate account setup and removal so user roles and permissions stay current
Prepare the IAM compliance report with system settings, access records, and compliance status

What you bring

An active, in-scope SECRET clearance
A relevant bachelor's degree or five years of equivalent IAM engineering experience
Experience designing cloud IAM frameworks, configuring identity governance tools, and applying Zero Trust models
Hands-on use of Microsoft Entra ID, Okta, Ping Identity, or AWS IAM
Knowledge of SAML, OAuth, OpenID Connect, RBAC, MFA, identity federation, and DoD IL2, IL4, and IL5 standards

Who this fits

This remote role suits an IAM engineer who can work across secure cloud and on-premises environments. It requires a strong internet connection and a quiet workspace without interruptions. The position depends on a contract award.

From the employer

Founded in 1989, SOSi is among the largest private, founder-owned technology and services integrators in the defense and government services industry. We deliver tailored solutions, tested leadership, and trusted results to enable national security missions worldwide.

**This position is contingent upon contract award**

SOSi is seeking a IAM Engineers to support mission requirements for a structured approach to further develop, integrate, and sustain a scalable, federated data ecosystem that enhances interoperability, governance, and mission-driven analytics for a DoD customer. The primary objective of the program is to bridge the operational gaps between DoD, IC, interagency, and non-traditional international partners to enable real-time information sharing, dynamic data integration, and mission-tailored analytical capabilities.

Design, implement, and manage Identity and Access Management (IAM) solutions, ensuring secure authentication and access control across cloud and on-premises environments.
Enforce Zero Trust Architecture (ZTA) principles and role-based access control (RBAC) policies to protect mission-critical systems.
Integrate IAM solutions with Microsoft Entra ID (formerly Azure Active Directory), Public Key Infrastructure (PKI), and Common Access Card (CAC) authentication mechanisms.
Oversee IAM automation, ensuring streamlined provisioning and de-provisioning of user roles and permissions.
Submit the Identity & Access Management Compliance Report, detailing system configurations, access logs, and compliance status

Minimum Requirements:

Active in-scope SECRET Clearance.
Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or a related field, or
- five (5) years of equivalent experience in IAM engineering.
Demonstrated experience in designing and managing IAM frameworks in cloud environments (AWS, Azure), configuring identity governance tools, and implementing zero-trust architecture models.
Experience with tools such as Microsoft Entra ID (formerly Azure AD), Okta, Ping Identity, or AWS IAM is required.
Possess the knowledge and capability to design, implement, and manage Identity and Access Management (IAM) solutions within secure cloud and on-premises environments.
Proficient in authentication protocols (SAML, OAuth, OpenID Connect), role-based access control (RBAC), multi-factor authentication (MFA), and identity federation across hybrid environments.
Strong knowledge of DoD IL2, IL4, and IL5 security frameworks and compliance standards is required.

Preferred Qualifications:

Desirable but not required certifications include Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, or Microsoft Certified: Identity and Access Administrator Associate.

Working Conditions: