Cloud Onboarding Engineer – Identity & Access Management

BT- 447 – Cloud Onboarding Engineer – Identity & Access Management Skill Level: Senior Principal Location: Reston, VA **Please do NOT apply if you do not have an active Poly clearance. Those without a Poly will not be considered.** Required Skills: Demonstrated experience integrating commercial cloud environments with agency-specific enterprise services and identity architectures in a secure, regulated, or mission environment. Proven hands-on experience designing, deploying, securing, and operating OCI solutions, including identity, audit logging, network security, secrets and key management, and privileged-access controls. Experience integrating applications and cloud services with NGA GEOAxIS and/or comparable enterprise IAM platforms. Hands-on experience implementing federation, SSO, MFA, identity lifecycle provisioning and deprovisioning, RBAC/ABAC, and least-privilege access models. Proficiency with SAML 2.0, OpenID Connect/OAuth 2.0, SCIM, LDAP, and Active Directory, including token claims and attribute mapping, certificates, metadata exchange, and authentication-flow troubleshooting. Experience applying Zero Trust principles and documenting secure identity designs, control implementations, test evidence, and operating procedures. Working knowledge of RMF, ICD 503, and NGA A&A processes, including security-control implementation and assessment evidence. Strong stakeholder communication skills and ability to coordinate solution architectures with Oracle personnel and client stakeholders. 8+ years relevant experience to this position Desired Skills: Associate- or Professional-level OCI certification in Architect, Security, Networking, or Cloud Operations. Experience supporting security assessments, authorization packages, control validation, and remediation tracking. Experience integrating cloud and identity logs with enterprise monitoring or SIEM platforms. Experience with Terraform, OCI Resource Manager, or comparable infrastructure-as-code and automated configuration capabilities.