{"id":2294901,"url":"https://alion.io/job/peraton-iam-identity-access-management-engineer","title":"IAM (Identity & Access Management) Engineer","company":{"id":722,"name":"Peraton","domain":"peraton.com","url":"https://alion.io/company/peraton","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":{"grade":"A","score":100,"open_postings":8,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":7,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chantilly, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":120000,"max_usd":234000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1121},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"GitLab","optional":false},{"name":"IAM","optional":false},{"name":"Keycloak","optional":false},{"name":"Kubernetes","optional":false},{"name":"LDAP","optional":false},{"name":"Platform Engineering","optional":false},{"name":"ServiceNow","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-11T20:28:17Z","employer_posted_date":"2026-10-11","last_verified_at":"2026-10-13T11:48:54Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Responsibilities\nWe are seeking Identity & Access Management (IAM) Engineers to design, automate, operate, and sustain identity and access services across a complex, highly secure platform environment.\nThese engineers will support identity federation, authentication, authorization, RBAC/ABAC, single sign-on (SSO), privileged access, and workload identity across shared platform services and tenant environments. The role will integrate enterprise identity and token services with applications, cloud platforms, Kubernetes, development environments, and operational services while maintaining the identity-to-entitlement layer that controls access across the environment.\nThe ideal candidate brings strong IAM engineering experience and is comfortable working across identity platforms, cloud infrastructure, applications, security controls, and automation. This role offers the opportunity to build and operate identity capabilities that support both human users and machine/workload identities at scale.\nResponsibilities\nIdentity Federation & Single Sign-On\nIntegrate platform services with enterprise identity, token, and directory services.\n\nDesign, operate, and integrate Keycloak or equivalent identity services.\n\nImplement and troubleshoot OAuth/OIDC, SAML, LDAP, and related identity-federation patterns as applicable.\n\nMaintain reliable SSO across approved platform services, applications, and environments.\n\nTroubleshoot federation and authentication flows across interconnected systems and identity providers.\n\nAuthorization & Entitlements\nDesign and maintain Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) patterns for users, tenant administrators, privileged users, and services.\n\nIntegrate identity and authorization services with GitLab, Kubernetes, mission applications, ServiceNow, and federated AWS access.\n\nDesign and support workload and service-identity patterns for pipelines, automation, APIs, and platform services.\n\nSupport access reviews, access recertification, and separation-of-duties requirements.\n\nEnsure identity and entitlement models align with established security and access-control requirements.\n\nAutomation & Identity Operations\nAutomate user, group, role, and entitlement lifecycle activities where practical.\n\nSupport privileged-access workflows and elevated-role approval processes.\n\nTroubleshoot authentication, authorization, token, and federation issues escalated from Tier 2 support.\n\nMaintain identity-service monitoring, documentation, recovery procedures, and operational support processes.\n\nIdentify opportunities to improve identity lifecycle management and reduce manual access-management activities through automation.\n\nPlatform & Security Integration\nCollaborate with cloud, Kubernetes, platform, application, infrastructure, and cybersecurity teams to integrate identity capabilities across the environment.\n\nSupport identity requirements for shared services, tenant environments, applications, and automated workloads.\n\nEvaluate identity and access impacts of new services, platform changes, and evolving architecture.\n\nSupport secure identity patterns across highly restricted and multi-domain environments.\n\nLocation: This position is fully onsite in Chantilly, VA\nQualifications\nRequired Qualifications\nActive TS/SCI clearance with CI Polygraph.\nApproximately 6-8 years of experience in IAM, cybersecurity, directory services, security engineering, platform engineering, or a related discipline.\n\n6 years' of experience with a BS/BA, an additional 4 years' may be considered in lieu of a degree.\nDemonstrated experience with identity federation, SSO, OAuth/OIDC, SAML, RBAC, and enterprise identity systems.\n\nExperience integrating identity and access services with cloud, applications, or Kubernetes environments.\n\nExperience troubleshooting complex authentication, authorization, token, and federation issues.\n\nWorking knowledge of privileged-access management and identity lifecycle controls.\n\nStrong scripting and automation skills.\n\nStrong analytical, troubleshooting, documentation, and communication skills.\n\nDesired Qualifications\nExperience with Keycloak.\n\nExperience with AWS IAM and federated-role integration.\n\nExperience with Kubernetes RBAC.\n\nExperience with GitLab identity integration.\n\nExperience with ServiceNow identity or workflow integration.\n\nExperience with Zero Trust architectures.\n\nExperience supporting classified or multi-domain identity environments.\n\nExperience automating identity lifecycle and entitlement management.\n\nPeraton Overview\nPeraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.\nTarget Salary Range\n$112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.EEO\nEEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.","description_format":"text","description_chars":6010,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["National Security","Information Security","Homeland Security","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-10-11T20:28:17Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":7,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/peraton-iam-identity-access-management-engineer","json_url":"https://alion.io/job/peraton-iam-identity-access-management-engineer.json","meta":{"generated_at":"2026-10-13T12:46:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19842,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":722},"rest":"https://alion.io/mcp/rest/get_company?id=722"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fperaton-iam-identity-access-management-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fperaton-iam-identity-access-management-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fperaton-iam-identity-access-management-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/peraton-iam-identity-access-management-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fperaton-iam-identity-access-management-engineer"}]}