Identity Access Management Engineer

Job not on LinkedIn

🕒 3 days ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

👷🏻‍♀️ Engineer

👻 Ghost score 15%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Open for 3 days.
• No salary listed.

Apply Now

Check your resume score

Customize resume + cover letter

Find Similar Remote Jobs

☆ Save☑️ Mark as applied❌ Hide

Report problem

Raytek Federal Corporation

WebsiteLinkedInAll Job Openings

2 - 10 employees

Founded 2021

🔒 Cybersecurity

💼 Consulting

🏛️ Government

Cybersecurity • Consulting • Government

RayTek Federal Corporation is a Woman-Owned Small Business (WOSB) headquartered in Tampa, FL (founded early 2021) that provides IT and professional support services to federal and commercial customers. RayTek offers cybersecurity services (security posture analysis, FISMA assessments and authorizations, incident response, advanced threat defense), professional services (program and project management, business development consulting, business process improvement, staff augmentation), and software engineering & application development (custom software development, systems engineering, enterprise integration). The company positions itself as delivering long-lasting, integrated solutions for government and commercial clients.

📋 Description

• Design, deploy, and operate Keycloak as a credential-free federation broker in AWS GovCloud on Kubernetes, with high availability, backup, and upgrade paths • Federate to OIDC and SAML identity providers, including CAC/PIV (PKI) and non-PKI multi-factor paths • Build claim mappers and assurance levels producing a normalized token with user type, roles, organization, and assurance • Register the platform as a relying party and manage certificates, keys, and secrets rotation • Implement OAuth 2.0 Token Exchange (RFC 8693) for short-lived, single-audience tokens • Implement silent sign-on into existing applications without rewriting them • Work with the Platform Architect on attribute-based, least-privilege authorization with Open Policy Agent, including claims, policy inputs, and decision logging • Write the identity integration guide and templates for application teams • Lead identity discovery with application owners • Troubleshoot sign-on and access issues across onboarded applications • Write automated tests for role switching, revocation, prohibited actions, and token lifetime in the CI pipeline • Produce identity portions of RMF security authorization evidence with the security lead • Present identity design and status at sprint demonstrations and phase-exit reviews

🎯 Requirements

• Active Secret clearance • Bachelor's degree in computer science or a related field, or equivalent experience • 10+ years in software or systems engineering • 5+ years focused on identity and access management • Deep hands-on Keycloak experience in production, including realms, identity brokering, mappers, authentication flows, clustering, and upgrades • Strong working knowledge of OIDC, OAuth 2.0, SAML 2.0, and PKI / smart-card (CAC/PIV) authentication • Experience integrating single sign-on into legacy applications without rewriting them • Experience running identity services on Kubernetes in a regulated or Government cloud • Experience with DoD identity services (DISA E-ICAM, D-ICAM) or other Federal ICAM programs • OAuth 2.0 Token Exchange (RFC 8693) in production • Policy-as-code with Open Policy Agent / Rego • Zero-trust architecture experience; familiarity with NIST SP 800-63 assurance levels • Java (Keycloak SPI development) or Go • AWS GovCloud • Helm • OpenTofu or Terraform • Experience producing RMF authorization evidence for identity controls • Security+ or CISSP (DoD 8140 baseline)

🏖️ Benefits

• UnitedHealthcare Choice Plus HSA plan with 100% in-network preventive care and nationwide network and out-of-network coverage • 24/7 virtual visits and behavioral health support, including the Sanvello app and in-person or virtual therapy • Dental PPO with a $1,500 annual max and 100% preventive coverage • Vision plan with $10 exams, a $150 frame allowance, and a $150 contact lens allowance • Exercise reimbursement up to $360 per year • Employer HSA match up to $1,200 (individual) or $2,400 (family) annually • 401(k) plan with immediate eligibility and 100% vesting • Employer 401(k) match up to 4% after 1 year • Company-paid Life & AD&D at 1x annual salary, up to $100,000 • Company-paid Short-Term Disability: 60% of pay, up to $1,000 weekly, for up to 13 weeks • Company-paid Long-Term Disability: 50% of pay, up to $8,000 monthly • 11 paid federal holidays (may vary by program) • PTO accrual from day one • Remote flexibility for eligible positions • Day-one eligibility for all benefits for full-time employees (30+ hours/week) • Dependent coverage up to age 26 • Employee Assistance Program (EAP), available 24/7, with confidential counseling, legal, and financial support • Travel Assistance Program for emergency medical care, evacuation, and global support • Referral, commendation, and milestone service bonuses

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume