Lead Systems Engineer- IAM 5 days onsite Reston, VA

Lead Systems Engineer- IAM

We are looking for a Lead Systems Engineer to drive this company’s Identity and Access Management (IAM) program. This role ensures secure, seamless access to the company’s networks, applications, and systems across both cloud and on-premises environments. The ideal candidate is an expert in Microsoft Entra ID and related IAM technologies, with a strong focus on protecting sensitive data through modern access controls.

The company is located in Reston, VA and will be 5 days onsite.

What You Will Be Doing:

• Architect, implement, and manage Microsoft Entra ID and IAM solutions.
• Administer and optimize Privileged Access Management (PAM) and Privileged Identity Management (PIM).
• Design and enforce Conditional Access Policies (CAP) to safeguard multi-environment access.
• Manage Access Reviews and implement Just-in-Time (JiT) access.
• Integrate Microsoft Defender for Cloud and Identity for advanced threat detection/response.
• Oversee SSO configurations and Dynamic Group Management.
• Lead IAM strategy and execution, ensuring alignment with enterprise security and compliance standards.
• Collaborate with security, infrastructure, and application teams to integrate IAM into business workflows.
• Partner with stakeholders across the organization to communicate risks, priorities, and solutions.
• Mentor and coach junior engineers to support career growth and technical development.
• Monitor IAM system performance, compliance posture, and audit readiness.
• Stay ahead of evolving IAM technologies, trends, and compliance requirements.

Required Skills & Experience:

• Bachelor’s degree in Computer Science, IT, or related discipline.
• 5+ years of systems engineering experience with a focus on IAM.
• Deep expertise in Microsoft Entra ID, PAM, PIM, CAP, SSO, and Defender for Cloud.
• Strong understanding of Azure, Microsoft 365, and hybrid cloud environments.
• Familiarity with compliance frameworks such as NIST, ISO, and SOX.
• Proven ability to lead cross-functional projects and engage with executive stakeholders.
• Demonstrated experience mentoring and developing engineering talent.
• Certifications such as Microsoft Certified: Identity and Access Administrator Associate are a plus.

Applicants must be currently authorized to work in the United States on a full-time basis now and in the future.
This position doesn’t provide sponsorship.