Identity and Access Engineer in Bathesda, Virginia at Apavo Corporation

About Apavo

Apavo is a woman-owned cybersecurity company supporting Department of Defense and Intelligence Community missions. We're a small, dedicated team where your expertise is valued and your work directly supports national security.

About the Role

Apavo is hiring an Identity and Access Engineer to secure who and what can use new AI services for an Intelligence Community customer. You'll design the identity, policy, and key controls that keep users, services, and data properly separated.

What You'll Do

• Integrate services with enterprise identity using OIDC and PingFederate or similar providers.
• Implement role-based access control and policy enforcement for users and service accounts.
• Manage the lifecycle of API keys and secrets, including rotation and revocation.
• Keep tenants and projects isolated, and separate approval duties.
• Run access reviews and make onboarding and offboarding auditable.

Required Qualifications

• Active TS/SCI clearance.
• 8+ years in identity and access management or security engineering.
• Hands-on OIDC, SAML, or federation experience.
• Experience with RBAC design and secrets management.

Preferred Qualifications

• PingFederate experience.
• Experience with zero trust architectures.
• A DoD 8570/8140 baseline certification.

Benefits

• Medical, dental, and vision insurance starting on your first day, with Apavo covering 90% effective January 1, 2027.
• 401(k) with a 3.5% employer match, starting January 1, 2027.
• 20 days of paid time off plus 11 paid federal holidays.
• Up to $3,000 a year in training and certification reimbursement.
• Parking reimbursement.

Apavo is an Equal Opportunity Employer.