Senior Principal Information Engineer
ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work™
ASRC Federal is looking for an individual with deep technical knowledge and strong analytical skills in Identity and Access Management (IAM) to join our team as a Senior Principal Information Engineer. This is a full-time remote role with minimal travel requirements.
This Senior Principal Information Engineer role is critical to securing user identities, credentials, application access, and cryptographic trust across enterprise and cloud connected environments. This individual will drive modernization initiatives, strengthen access controls, and ensure compliance with federal security standards.
The ideal candidate brings deep expertise in directory services, authentication systems, access governance, vault and secrets management, cloud identity integration, and PKI, along with a strong understanding of compliance frameworks such as CMMC L2/3 and NIST SP 800-63/171/172.
Key Responsibilities
Update and maintain the framework, design, and governance of enterprise IAM services, supporting business, security, and operational requirements.
Structure and manage directory and identity services including enterprise directory platforms and LDAP-based systems.
Construct authentication and access control mechanisms for users, applications, and infrastructure, including strong and risk-based authentication models.
Define and monitor identity lifecycle processes covering onboarding, privileged access, access changes, and offboarding for employees, contractors, and partners.
Design secure access enforcement and entitlement models for enterprise systems and applications.
Drive authentication modernization initiatives, reducing credential risk while improving user experience.
Architect and integrate vault and secrets management capabilities for applications, services, and infrastructure.
Integrate IAM services with cloud identity platforms and hybrid environments.
Work with federation standards and protocols such as SAML, and others as required.
Ensure IAM services are designed for high availability, resilience, and disaster recovery.
Perform regular health checks, access reviews, and security assessments across IAM platforms.
Troubleshoot and resolve complex identity, authentication, and access issues.
Support internal and external audits by providing documentation, evidence, and remediation plans.
Collaborate closely with IAM, Infrastructure, Security, Cloud, and Application teams.
Provide architectural guidance, design reviews, and technical leadership with respect to IAM.
Participate and contribute to change management, documentation, and governance processes using ITSM tools.
Mentor engineers and lead cross-functional technical initiatives.
Required Skills & Experience
Bachelor’s degree in computer science, Information Security, or equivalent practical experience.
10+ years of experience in enterprise IT or Information Security, with strong specialization in Identity and Access Management.
Industry Certification (one or more) CIAM, MS SC-300, CIPRO, etc.
Deep technical understanding' of MS/M365/Azure Gov IAM practices
Working knowledge of PIM, PAM, PUM and associated tools CyberArk etc.
Proven experience designing and leading enterprise-scale IAM architectures.
Strong expertise in directory services, authentication systems, access controls, and identity governance.
Hands-on experience with LDAP-based platforms, strong authentication solutions, and access enforcement technologies.
Experience with vault or secrets management platforms and secure credential handling.
Strong understanding of cloud identity integration and hybrid IAM models.
Experience working with federation protocols and identity standards.
Familiarity with ITIL processes (Incident, Change, Problem Management).
Experience using service management tools.
Ability to work with cross-functional teams and communicate complex requirements clearly.
U.S. citizenship required; ability to obtain and maintain a security clearance may be required.
We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.
EEO Statement
ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.
ASRC Federal is looking for an individual with deep technical knowledge and strong analytical skills in Identity and Access Management (IAM) to join our team as a Senior Principal Information Engineer. This is a full-time remote role with minimal travel requirements.
This Senior Principal Information Engineer role is critical to securing user identities, credentials, application access, and cryptographic trust across enterprise and cloud connected environments. This individual will drive modernization initiatives, strengthen access controls, and ensure compliance with federal security standards.
The ideal candidate brings deep expertise in directory services, authentication systems, access governance, vault and secrets management, cloud identity integration, and PKI, along with a strong understanding of compliance frameworks such as CMMC L2/3 and NIST SP 800-63/171/172.
Key Responsibilities
Update and maintain the framework, design, and governance of enterprise IAM services, supporting business, security, and operational requirements.
Structure and manage directory and identity services including enterprise directory platforms and LDAP-based systems.
Construct authentication and access control mechanisms for users, applications, and infrastructure, including strong and risk-based authentication models.
Define and monitor identity lifecycle processes covering onboarding, privileged access, access changes, and offboarding for employees, contractors, and partners.
Design secure access enforcement and entitlement models for enterprise systems and applications.
Drive authentication modernization initiatives, reducing credential risk while improving user experience.
Architect and integrate vault and secrets management capabilities for applications, services, and infrastructure.
Integrate IAM services with cloud identity platforms and hybrid environments.
Work with federation standards and protocols such as SAML, and others as required.
Ensure IAM services are designed for high availability, resilience, and disaster recovery.
Perform regular health checks, access reviews, and security assessments across IAM platforms.
Troubleshoot and resolve complex identity, authentication, and access issues.
Support internal and external audits by providing documentation, evidence, and remediation plans.
Collaborate closely with IAM, Infrastructure, Security, Cloud, and Application teams.
Provide architectural guidance, design reviews, and technical leadership with respect to IAM.
Participate and contribute to change management, documentation, and governance processes using ITSM tools.
Mentor engineers and lead cross-functional technical initiatives.
Required Skills & Experience
Bachelor’s degree in computer science, Information Security, or equivalent practical experience.
10+ years of experience in enterprise IT or Information Security, with strong specialization in Identity and Access Management.
Industry Certification (one or more) CIAM, MS SC-300, CIPRO, etc.
Deep technical understanding' of MS/M365/Azure Gov IAM practices
Working knowledge of PIM, PAM, PUM and associated tools CyberArk etc.
Proven experience designing and leading enterprise-scale IAM architectures.
Strong expertise in directory services, authentication systems, access controls, and identity governance.
Hands-on experience with LDAP-based platforms, strong authentication solutions, and access enforcement technologies.
Experience with vault or secrets management platforms and secure credential handling.
Strong understanding of cloud identity integration and hybrid IAM models.
Experience working with federation protocols and identity standards.
Familiarity with ITIL processes (Incident, Change, Problem Management).
Experience using service management tools.
Ability to work with cross-functional teams and communicate complex requirements clearly.
U.S. citizenship required; ability to obtain and maintain a security clearance may be required.
We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.
EEO Statement
ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.