29515BR
Job Description:
Westat is a leader in research, data collection and analysis, technical assistance, evaluation, and communications. Our evidence-based findings help clients in government and the private sector accelerate advancements in health, education, transportation, and social and economic policy. Our dedication to improving lives through research and our approach to projects grounded in investigative curiosity, statistical and data rigor, adaptive methods, and advanced technology are why clients find exceptional value in our work.
Westat is seeking a Senior Identity and Access Management (IAM) Engineer to design, implement, and support the organization’s IAM solutions across on-premises, cloud, and hybrid environments. This role will interface with the Infrastructure and IT Security team and serve as the subject-matter expert for IAM technologies, cloud-based identity services, and secure access management.
This is a US-based role, and applicants must reside in the Greater D.C. Metropolitan (DMV) Area and be able to work in Westat’s Bethesda office 3 days per week.
Job Responsibilities:
+ Manage and optimize hybrid identity infrastructure across on-premises Active Directory, Azure AD/Entra AD, including domain controllers, group policies, authentication mechanisms, and cloud-based identity services.
+ Design and support multiple DNS zones and troubleshoot related issues.
+ Maintain and enhance Okta identity and access management solutions, including single sign-on (SSO), multi-factor authentication (MFA), and secure access for cloud and on-premises applications.
+ Work with Entra AD, M365, and other cloud-based identity management systems to streamline user provisioning, deprovisioning, access control, and identity-based cloud service integrations.
+ Continuously improve identity services by evaluating innovative technologies, implementing best practices, and optimizing performance.
+ Work closely with security, network, and application teams to integrate identity services seamlessly while ensuring compliance and other regulatory requirements.
+ Provide technical support by troubleshooting and resolving complex identity-related issues, minimizing impact on end users.
+ Create comprehensive documentation and conduct training sessions for IT staff and end-users.
+ Ensure compliance with industry and regulatory requirements, including FISMA Moderate compliance.
Basic Qualifications:
+ A minimum of 7 years of progressive IT experience; or a bachelor’s degree in a related technical field with a minimum of 5 years of progressive IT experience.
+ Demonstrated knowledge of Active Directory, Azure AD/Entra AD, and cloud identity services, with a focus on access control, authentication, and secure user lifecycle management.
+ Demonstrated knowledge of domain controllers, trusts, and replication.
+ Demonstrated experience in DNS management and troubleshooting.
+ Experience with Okta or other cloud-based identity and access management (IAM) platforms, including Single Sign-On technologies and multi-factor authentication.
+ Demonstrated experience supporting enterprise infrastructure solutions.
+ Demonstrated experience supporting cloud infrastructure and services, including Amazon Web Services (AWS), Microsoft Azure, and Azure Cloud Services.
Preferred Qualifications:
+ Meticulous with excellent organization and analytical and critical thinking skills.
+ Able to communicate clearly and effectively.
+ Ability to explain highly technical concepts in simple terms.
+ Ability to analyze complex issues, propose effective solutions, and implement them efficiently.
+ Excellent people skills to work effectively with cross-functional teams and build strong relationships.
Westat offers a well-rounded and comprehensive benefits program focused on wellness and work/life balance. Subject to plan requirements, employees may participate in:
+ Employee Stock Ownership Plan
+ 401(k) Retirement Plan
+ Paid Parental Leave
+ Vacation Leave (20 days per year)
+ Sick Leave (9 days per year)
+ Holiday Leave (7 government holidays and 2 floating holidays)
+ Professional Development
+ Health Advocate
+ Employee Assistance Program
+ Travel Accident Insurance
+ Medical Insurance
+ Dental Insurance
+ Vision Insurance
+ Short Term Disability Insurance
+ Long Term Disability Insurance
+ Life and AD&D Insurance
+ Critical Illness Insurance
+ Supplemental Life Insurance
+ Flexible Spending Account
+ Health Savings Account
Any offer of employment may be contingent upon receipt of acceptable results from a post-offer background screening, if required for the specific position, which may include, for example, identity verification, employment history, motor vehicle driving record history, and criminal or sexual offender records history. Any background screening results will be evaluated through an individualized assessment based on the individual’s specific record and the duties and requirements of the position.
This opportunity will be posted for a minimum of 5 days and applications will be accepted on an ongoing basis.
Employment Eligibility: This is a U.S.-based position. Candidates must be authorized to work in the United States on a full-time basis. Westat does not offer employment-based visa sponsorship (including H-1B sponsorship) for this role. Depending on project requirements, some positions may require employees to meet specific residency criteria.
Westat is an Equal Opportunity Employer and does not discriminate on the basis of race, creed, color, religion, sex, national origin, age, veteran status, disability, marital status, sexual orientation, citizenship status, genetic information, or any other protected status under applicable law. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
#LI-WST1 #HYBRID
Pay Range:
The anticipated salary range for this role is $115k-$146k per year and will be commensurate with experience.