Okta
OAuth
OpenID
FedRAMP
Auditing
Equities
CyberArk
Mentorship
Governance
Peer Review
Market Data
Investigation
Risk Analysis
Microsoft 365
Authentications
Microsoft Azure
Access Controls
Law Enforcement
Ancient History
Computer Science
Active Directory
Incident Response
Digital Forensics
Directory Service
Windows PowerShell
Facebook Graph API
Systems Engineering
Amazon Web Services
Technical Authority
Single Sign-On (SSO)
Business To Business
Lifecycle Management
Technical Leadership
Business-To-Consumer
Integration Strategy
Information Technology
Azure Active Directory
Digital Transformation
Technical Documentation
Authorization (Computing)
Multi-Factor Authentication
Privileged Access Management
Zero Trust Architecture (ZTA)
Continuous Improvement Process
Identity And Access Management
Microsoft Certified Professional
Role-Based Access Control (RBAC)
AWS Identity And Access Management (IAM)
Security Assertion Markup Language (SAML)
Cloud Identity and Access Management (IAM)
Federal Information Security Management Act
At least 12 years
$131,300 - $237,350 / yr
Posted yesterday
Description:
Description
Leidos Digital Civilian Agency Solutions division is seeking an expert-level Lead Identity and Access Management Engineer to serve as the senior technical authority for complex enterprise identity management solutions for large-scale government digital transformation initiatives. The ideal candidate will have deep expertise in Microsoft identity technologies and a proven track record of designing, implementing, and maturing IAM architecture and processes across cloud and on-premises environments, ensuring alignment with industry frameworks and regulatory requirements, and provides technical leadership and mentorship to junior and mid-level IAM engineers. advanced enterprise-level identity solutions.
Candidate MUST:
Be a US Citizen or US Person who has lived in the United States for at least three consecutive years and have the ability to obtain a Public Trust level 4 clearance
Primary Responsibilities:
- PAM: CyberArk, Beyond Trust
- SSO/Federation: Okta, Microsoft Entra ID, Ping Identity
- Directory Services: Active Directory, Azure AD/Entra ID, LDAP
Original Posting:
August 5, 2026
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
Pay Range:
Pay Range $131,300.00 - $237,350.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com .
Pay and Benefits
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits .
Securing Your Data
Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com .
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission .
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.
Leidos Digital Civilian Agency Solutions division is seeking an expert-level Lead Identity and Access Management Engineer to serve as the senior technical authority for complex enterprise identity management solutions for large-scale government digital transformation initiatives. The ideal candidate will have deep expertise in Microsoft identity technologies and a proven track record of designing, implementing, and maturing IAM architecture and processes across cloud and on-premises environments, ensuring alignment with industry frameworks and regulatory requirements, and provides technical leadership and mentorship to junior and mid-level IAM engineers. advanced enterprise-level identity solutions.
Candidate MUST:
Be a US Citizen or US Person who has lived in the United States for at least three consecutive years and have the ability to obtain a Public Trust level 4 clearance
Primary Responsibilities:
- Lead the design, engineering, and continuous improvement of enterprise IAM solutions, including Identity Governance and Administration (IGA), Privileged Access Management (PAM), Single Sign-On (SSO)/Federation, Multi-Factor Authentication (MFA), and directory services.
- Serve as the SME for IAM architecture decisions, tool selection, and integration strategy across cloud (Azure, AWS, GCP) and on-premises platforms.
- Define and enforce Identity lifecycle management processes (joiner-mover-leaver), role-based/attribute-based access control (RBAC/ABAC), and least-privilege principles.
- Lead IAM-related audits, risk assessments, and remediation efforts; ensure compliance with regulatory and contractual obligations.
- Partner with security operations, application owners, and compliance teams to integrate applications into enterprise IAM platforms (e.g., Microsoft Entra ID/Azure AD, Okta, Ping Identity, CyberArk).
- Provide technical leadership, mentoring, and peer review for IAM engineering staff.
- Support incident response and forensic investigations involving identity-related events.
- Evaluate emerging IAM technologies (e.g., password less authentication, decentralized identity, Zero Trust architecture) and recommend adoption strategies.
- Prepare technical documentation, architecture diagrams, and executive-level reporting on IAM posture and roadmap.
- Bachelor's degree in computer science, Information Technology, or equivalent and 12 years of general experience, preferably supporting system engineering. 6 years of additional experience is equivalent to a Bachelor's degree. With a Master's degree, 10 years of general experience is required.
- 8+ years of progressive experience focusing on identity and access management.
- 5+ years in a senior/lead or SME capacity, with demonstrated ownership of enterprise-scale IAM architecture.
- Hands-on experience with at least two of the following IAM platform categories:
- PAM: CyberArk, Beyond Trust
- SSO/Federation: Okta, Microsoft Entra ID, Ping Identity
- Directory Services: Active Directory, Azure AD/Entra ID, LDAP
- Experience supporting federal, defense, or highly regulated environments preferred (especially for government/contractor roles).
- Experience with cloud IAM services (Azure Entra ID, AWS IAM/SSO, GCP IAM).
- Deep understanding of authentication and authorization protocols: SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, Kerberos.
- Extensive hands-on experience with Microsoft identity solutions (Entra ID, AD FS, Microsoft 365, MIM).
- Proven experience in large-scale, multi-forest Active Directory and Entra ID architectures.
- Advanced knowledge of identity protocols (SAML, OAuth 2.0, OpenID Connect, WS-Federation, CBA).
- Strong experience with Entra B2B and B2C for external identity management.
- Experience with Entra AD Connect, including custom synchronization rules.
- Strong proficiency in PowerShell and Graph API for identity management automation.
- Familiarity with Zero Trust architecture and identity-related security best practices.
- Relevant certifications, hold at least one or two of the following, aligned to seniority:
- CIAM (Certified Identity and Access Manager) or CIGE (Certified Identity Governance Expert)
- Microsoft Certified: Identity and Access Administrator Associate (SC-300)
- CyberArk Defender/Sentry/Guardian
- Okta Certified Professional/Consultant/Administrator
- Ping Identity Certified Professional
- CompTIA Security+
- Knowledge of identity-related compliance standards (e.g., NIST, FISMA, SOC, FedRamp).
- Experience with Azure AD Verifiable Credentials and decentralized identity concepts.
- Understanding of biometric authentication methods and their Azure AD integration.
Original Posting:
August 5, 2026
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
Pay Range:
Pay Range $131,300.00 - $237,350.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com .
Pay and Benefits
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits .
Securing Your Data
Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com .
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission .
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.
Posting ID: R-00188825