Cloud Onboarding Engineer – Identity & Access Management
Bespoke Technologies · Reston, VA
BT- 447 – Cloud Onboarding Engineer – Identity & Access Management
Skill Level: Senior Principal
Location: Reston, VA
**Please do NOT apply if you do not have an active Poly clearance. Those without a Poly will not be considered.**
Required Skills:
- Demonstrated experience integrating commercial cloud environments with agency-specific enterprise services and identity architectures in a secure, regulated, or mission environment.
- Proven hands-on experience designing, deploying, securing, and operating OCI solutions, including identity, audit logging, network security, secrets and key management, and privileged-access controls.
- Experience integrating applications and cloud services with NGA GEOAxIS and/or comparable enterprise IAM platforms.
- Hands-on experience implementing federation, SSO, MFA, identity lifecycle provisioning and deprovisioning, RBAC/ABAC, and least-privilege access models.
- Proficiency with SAML 2.0, OpenID Connect/OAuth 2.0, SCIM, LDAP, and Active Directory, including token claims and attribute mapping, certificates, metadata exchange, and authentication-flow troubleshooting.
- Experience applying Zero Trust principles and documenting secure identity designs, control implementations, test evidence, and operating procedures.
- Working knowledge of RMF, ICD 503, and NGA A&A processes, including security-control implementation and assessment evidence.
- Strong stakeholder communication skills and ability to coordinate solution architectures with Oracle personnel and client stakeholders.
- 8+ years relevant experience to this position
Desired Skills:
- Associate- or Professional-level OCI certification in Architect, Security, Networking, or Cloud Operations.
- Experience supporting security assessments, authorization packages, control validation, and remediation tracking.
- Experience integrating cloud and identity logs with enterprise monitoring or SIEM platforms.
- Experience with Terraform, OCI Resource Manager, or comparable infrastructure-as-code and automated configuration capabilities.