Identity and Access Management Engineer

Description

We are looking for an Identity and Access Management Engineer to support secure access solutions for enterprise applications in Silver Spring, Maryland. This role focuses on designing and maintaining federation services, strengthening identity governance practices, and improving the reliability of authentication and authorization processes. The ideal candidate will bring strong technical expertise in IAM architecture and a practical approach to resolving access, policy, and integration challenges.

Responsibilities:
Architect and support identity federation integrations for enterprise platforms using modern authentication and authorization standards such as OAuth 2.0 and OpenID Connect.
Establish and maintain trust relationships and secure sign-on configurations to ensure dependable access across connected applications.
Create clear onboarding frameworks and technical documentation to streamline the integration of new business systems into the identity environment.
Investigate and resolve complex authentication issues involving tokens, claims, and federated access flows.
Drive improvements to joiner, mover, and leaver processes so that account provisioning and deprovisioning remain accurate and timely.
Enhance access models and contribute to role engineering efforts that align user permissions with business responsibilities.
Support access review activities by helping coordinate certification campaigns and tracking remediation work through completion.
Reinforce segregation of duties controls and apply policy standards that reduce risk and strengthen governance.
Collaborate with infrastructure and engineering teams on directory services, Group Policy Objects, virtualization, storage, and DevOps-related IAM dependencies.

Requirements

Proven experience designing and supporting identity and access management solutions in complex enterprise environments.
Strong knowledge of federation concepts and hands-on experience with OAuth 2.0, OpenID Connect, claims, and token-based authentication.
Ability to develop process documentation and integration standards for onboarding enterprise applications.
Experience improving identity lifecycle workflows, including user onboarding, role changes, and offboarding activities.
Familiarity with access governance practices such as certification reviews, remediation tracking, and segregation of duties enforcement.
Working knowledge of Active Directory-related technologies, including Group Policy Objects and enterprise access architecture.
Understanding of supporting infrastructure domains such as server virtualization, enterprise storage, DevOps practices, and architecture standards.

Technology Doesn't Change the World, People Do.

Robert Half is the world's first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles.

Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the Robert Half app and get 1-tap apply, notifications of AI-matched jobs, and much more.

All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan. Visit roberthalf.gobenefits.net for more information.

2025 Robert Half. An Equal Opportunity Employer. M/F/Disability/Veterans. By clicking "Apply Now," you're agreeing to Robert Half's Terms of Use and Privacy Notice.