Security Systems Engineer (Need Local to McLean, VA)

This is a Hybrid position in McLean, VA/Dallas, TX or Memphis, TN 2-3 days/week

• 10 + years of IAM engineering, platform engineering, or identity integration experience in complex enterprise environments.
• Demonstrated experience implementing controls for non-human identities such as AI agents, service accounts, machine accounts, service principals, OAuth clients, and workload identities.
• Experience implementing or transitioning identity services to SaaS and cloud delivery models.
• Hands-on experience with privileged access management platforms such as HashiCorp Vault and OneIdentity Safeguard is preferred.
• Experience with CI/CD pipelines, infrastructure as code, automated testing, and Git-based workflows is preferred.
• Deep expertise in IAM engineering, platform engineering, and identity integration within complex enterprise environments.
• Proficiency in implementing controls for non-human identities, including AI agents, service accounts, machine accounts, service principals, OAuth clients, workload identities, and associated credentials and certificates.
• Strong working knowledge of traditional workforce identity platforms, including SailPoint IdentityIQ, PingFederate, PingDirectory, Microsoft Entra, and Microsoft Active Directory.
• Familiarity with support, monitoring, and observability platforms such as ServiceNow, Datadog, and Splunk.
• Proven ability to design, implement, and debug identity lifecycle, authentication, federation, authorization, directory, and provisioning solutions.
• Experience building APIs, connectors, scripts, and automation for operational processing, monitoring, and audit or compliance use cases.
• Working knowledge of HRIS integrations, identity data models, SQL, ETL or data pipelines, logging, and reconciliation controls.
• Strong troubleshooting, documentation, communication, and cross-functional delivery skills.
• Hands-on experience with SailPoint Identity Security Cloud, Agentic Fabric, Entro, Ping Agent IAM Core, PingAuthorize, API or MCP gateways, or comparable non-human identity platforms is preferred.
• Experience with privileged access management platforms such as HashiCorp Vault and OneIdentity Safeguard is preferred.
• Experience with CI/CD, infrastructure as code, automated testing, Git-based workflows, and production support practices is preferred.

Certifications

- Relevant SailPoint certifications are preferred.

- Relevant Ping Identity certifications are preferred.

- Relevant Microsoft certifications are preferred.

- Relevant cloud platform certifications are preferred.

- Relevant security certifications are preferred.