Hybrid Senior Identity & Access Management (IAM) Engineer

at MetroStar

• Job title: Senior Identity & Access Management (IAM) Engineer
• Job type: Full Time
• Experience level: Senior
• Salary: $170,000 - $201,000 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Azure, Cloud
• Location requirements: Hybrid, Washington D C, United States

About the role

• Sr. Identity & Access Management Engineer I at MetroStar, delivering ICAM solutions for federal missions. Collaborating with high-performing teams to resolve identity and access challenges.

Responsibilities

• Work as part of a collaborative and high-performing team delivering technical solutions within the highest levels of the federal government
• Design, implement, and maintain Active Directory and Azure Entra ID services
• Implement and support authentication, authorization, and federation solutions
• Integrate and manage SAML and OIDC-based identity solutions
• Participate in Agile planning, execution, and continuous improvement activities
• Troubleshoot and resolve complex identity and access issues rapidly and effectively
• Communicate clearly with both technical and non-technical stakeholders regarding identity solutions and impacts
• Establish and maintain a high level of customer trust and confidence through technical expertise and reliability
• Apply creativity and sound engineering judgment to deliver innovative solutions aligned to customer needs

Requirements

• Active Top Secret with current or previously held SCI access.
• Bachelor’s degree in Information Systems or a related field is preferred; relevant experience may substitute.
• Certification meeting DoD 8140 (e.g., Security+, or higher) and Microsoft SC-300; cloud security certifications may substitute.
• 5+ years of hands-on experience engineering and administering enterprise identity and access management solutions, with a primary focus on Microsoft identity technologies.
• Demonstrated experience designing, implementing, and maintaining authentication and authorization services in enterprise environments.
• Hands-on experience with Microsoft Active Directory and Azure Active Directory (Azure Entra ID), including directory services, identity lifecycle management, and access control.
• Operational experience supporting identity federation and authentication protocols, including SAML and OIDC.
• Experience managing PKI, certificate-based authentication, and Group Policy Objects in secure enterprise environments.
• Hands-on experience with ADFS and CASB in enterprise environments.
• Ability to contribute immediately with minimal ramp-up in a mission-critical operational environment.

Benefits

• Health, dental, and vision insurance
• 401(k) retirement plan with company match
• Paid time off (PTO) and holidays
• Parental Leave and dependent care
• Flexible work arrangements
• Professional development opportunities
• Employee assistance and wellness programs