IAM Engineer

The company is located in Herndon, VA and will require 3 days on site a week.

What You Will Be Doing: Serve as a Subject Matter Expert (SME) in Identity and Access Management (IAM) systems, including Microsoft Entra, Okta, and Active Directory. Demonstrate strong coding skills, particularly in PowerShell, with a focus on task automation. Develop, implement, and document processes for the IAM environment, covering: Performance monitoring Problem troubleshooting and helpdesk response Utilization, availability, and capacity planning Landscape design, configuration, and standards 24/7 support, escalation, and Service Level Agreement (SLA) models IMAC (Installation, Move, Add, Change) services for systems and applications Change management methodology and communication strategy Create and maintain server and application diagrams and workflows. Perform and coordinate incident diagnosis, corrective actions, and root cause analysis. Oversee the configuration, testing, installation, modification, and servicing of all server components and applications within the IAM landscape. Organize work requests independently, prioritizing based on departmental needs and system criticality. Manage vendor relationships for the evaluation, installation, modification, upgrade, repair, and preventive maintenance of IAM infrastructure components. Lead and perform comprehensive systems analysis and design activities, including developing detailed functional requirements for new server infrastructure solutions. Ensure end-user (customer) satisfaction. Participate in rotational on-call support and handle escalations as needed. Required Skills & Experience: Bachelor’s Degree in Computer Science, Management Information Systems (MIS), Information Technology, or equivalent experience in Information Security, Information Technology, or a related technical discipline. Minimum of 7 years of experience in Information Technology. At least 4 years of experience with server and application management in a fast-paced environment. Proficiency in PowerShell commands, scripting, and automating/customizing IAM processes and tasks. Experience with JSON, Python, and other coding languages. Familiarity with Identity Management technologies, including Microsoft Entra, Azure Active Directory Connect (Entra Connect), ADFS services, LDAP services, and JAMF. Experience integrating Okta IdP, Active Directory, and Azure Active Directory (Microsoft Entra), as well as designing and implementing Okta Workflows. Experience with API integrations for third-party SaaS services. Knowledge of Azure AD (Entra), MEM (Intune) conditional access, configuration, app, and management profiles. Understanding of Active Directory Group Policy. Knowledge of industry standards and best practices in IAM, including SAML, OpenID Connect, OAuth, LDAP, MFA, FIDO2, and YubiKey. Knowledge of Public Key Infrastructure (PKI) and Microsoft Certificate Services. Experience with RSA SecurID administration (cloud and on-premises). Working knowledge of TCP/IP and related networking protocols. Experience with desktop operating systems and server environments. Strong organizational skills with prior experience in a similar role as a Senior Server Administrator, Lead, or Architect. Experience operating firewalls, Intrusion Detection Systems, and 24/7 monitoring of networks. Excellent communication skills, with proven effectiveness in working with all levels of IT and business management. Desired Skills & Experience: Expert-level experience with Azure, including compute, network, cost/usage analysis, and resource management. Expert-level Microsoft Windows administration skills, including Active Directory, DNS, Group Policy, file services, IIS, and SQL. Advanced scripting skills in PowerShell, Perl, Python, and PowerCLI. Professional industry certifications in areas of expertise, such as MCSE, MCITP, Microsoft Azure Fundamentals (AZ-900), Microsoft Azure Administrator (AZ-104), Azure Certified Solutions Architect (AZ-303/304), or Okta certifications. Linux experience with platforms such as SUSE, RedHat, or CentOS. Experience integrating Security Information and Event Management (SIEM) tools, backups, and monitoring tools. Knowledge of best practices and security guidelines, such as NIST 800-53 rev 4.
Applicants must be currently authorized to work in the United States on a full-time basis now and in the future.
This position doesn’t provide sponsorship.

You will receive the following benefits:

Medical Insurance - Four medical plans to choose from for you and your family Dental & Orthodontia Benefits Vision Benefits Health Savings Account (HSA) Health and Dependent Care Flexible Spending Accounts Voluntary Life Insurance, Long-Term & Short-Term Disability Insurance Hospital Indemnity Insurance 401(k) including match with pre and post-tax options Paid Sick Time Leave Legal and Identity Protection Plans Pre-tax Commuter Benefit 529 College Saver Plan

Motion Recruitment Partners (MRP) is an Equal Opportunity Employer, including Veterans/Disability/Women. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under MRP’s Employment Accommodation policy. Applicants need to make their needs known in advance.