IDAM Engineer

Job Description

ECS is seeking an IDAM Engineer to work in our Washington, DC office.

ECS is seeking a highly skilled IDAM Engineer with strong Active Directory and identity management expertise to support a high-visibility federal program in Washington, DC. This role is ideal for an engineer who thrives in fast-paced environments, enjoys solving complex identity challenges, and wants to work with a team that values technical excellence and innovation.

Key Responsibilities

• Implement, maintain, and optimize enterprise systems in alignment with organizational standards and SOPs.
• Monitor and manage all installed systems, infrastructure, and directory services.
• Configure, test, and maintain operating systems, application software, and system management tools.
• Evaluate existing systems and provide technical guidance to IT support teams.
• Lead the development and integration of customized software and hardware solutions.
• Plan and implement automation to improve operational efficiency.
• Design and maintain security controls to ensure data integrity and system protection.
• Ensure high availability of technical resources and maintain accurate system inventories.
• Provide timely reporting and rapid response to system issues or outages.
• Support the development and enhancement of the client's Enterprise Directory, including LDAP schema design, object classes, attributes, queries, and group structures.
• Develop directory integration solutions across directory and database systems.
• Configure and support enterprise Identity Management systems, including role-based access, segregation of duties, workflow automation, and periodic access reviews.

Salary Range: $165,000 - $190,000

General Description of Benefits

Required Skills

• Active DoD Top Secret clearance with SCI eligibility and ability to obtain/maintain a CI polygraph.
• Minimum 5 years of technical experience in enterprise IT environments.
• Strong PowerShell scripting experience.
• Knowledge of: ADFS, Azure App Proxy, WPAD, and MFA technologies, especially Certificate Based Authentication (CBA)
• Deep knowledge of Active Directory, including:
• Domain controller maintenance and upgrades
• GPO management
• DNS and core AD infrastructure
• Experience with Entra ID (Azure AD), including:
• Application registrations and SSO onboarding
• Intune policy management
• Privileged Identity Management (PIM)
• Understanding of PKI technologies (LDAP directories, HSMs, OCSP) and security best practices.
• Experience working within large federal IT infrastructures.
• Ability to work on-site in downtown Washington, DC.

Desired Skills

• Bachelor's degree in computer science, Engineering, or related field (or equivalent experience).
• Experience with:
• Netwrix Auditor
• Splunk
• Quest Recovery Manager for AD (RMAD)
• SDM Change Manager for Group Policy (CMGP)
• Knowledge of:
• Microsoft Identity Manager (MIM)
• Experience with federated identity and web services security (SAML, ADFS, WS-Federation, WS-Security).
• Familiarity with Microsoft 365 and Azure AD integration.
• Card personalization industry experience.
• Strong analytical, troubleshooting, written, and verbal communication skills.
• Ability to quickly learn new technologies and tools.

#ECS1

ECS is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

ECS is a leading mid-sized provider of technology services to the United States Federal Government. We are focused on people, values and purpose. Every day, our 3300+ employees focus on providing their technical talent to support the Federal Agencies and Departments of the US Government to serve, protect and defend the American People.