Cloud Onboarding Engineer – Identity & Access Management

BT- 447 – Cloud Onboarding Engineer – Identity & Access Management

Skill Level: Senior Principal

Location: Reston, VA

 

**Please do NOT apply if you do not have an active Poly clearance. Those without a Poly will not be considered.**

 

Required Skills:

• Demonstrated experience integrating commercial cloud environments with agency-specific enterprise services and identity architectures in a secure, regulated, or mission environment.
• Proven hands-on experience designing, deploying, securing, and operating OCI solutions, including identity, audit logging, network security, secrets and key management, and privileged-access controls.
• Experience integrating applications and cloud services with NGA GEOAxIS and/or comparable enterprise IAM platforms.
• Hands-on experience implementing federation, SSO, MFA, identity lifecycle provisioning and deprovisioning, RBAC/ABAC, and least-privilege access models.
• Proficiency with SAML 2.0, OpenID Connect/OAuth 2.0, SCIM, LDAP, and Active Directory, including token claims and attribute mapping, certificates, metadata exchange, and authentication-flow troubleshooting.
• Experience applying Zero Trust principles and documenting secure identity designs, control implementations, test evidence, and operating procedures.
• Working knowledge of RMF, ICD 503, and NGA A&A processes, including security-control implementation and assessment evidence.
• Strong stakeholder communication skills and ability to coordinate solution architectures with Oracle personnel and client stakeholders.
• 8+ years relevant experience to this position

 

Desired Skills:

• Associate- or Professional-level OCI certification in Architect, Security, Networking, or Cloud Operations.
• Experience supporting security assessments, authorization packages, control validation, and remediation tracking.
• Experience integrating cloud and identity logs with enterprise monitoring or SIEM platforms.
• Experience with Terraform, OCI Resource Manager, or comparable infrastructure-as-code and automated configuration capabilities.