REQUIRED EXPERIENCE AND SKILLS

• Minimum of 4 years of Cloud proficiency experience with IAM systems, including managing IAM for AWS, Azure AD, Remedy, Okta, ADFS and hybrid environments.
• Proven experience designing and implementing cloud-based IAM solutions.
• Have a deep knowledge and understanding of system development in cloud environments, including Infrastructure as Code (IaC), Software as Service (SaaS), Platform as Service (PaaS), or Infrastructure as a Service (IaaS).
• Cloud Platforms (proficiency in at least one): AWS (Amazon Web Services), Microsoft Azure, Google Cloud Platform (GCP), Oracle Cloud Infrastructure (OCI) Operating Systems: Linux/Unix (Ubuntu, CentOS, Red Hat) Windows Server administration Infrastructure as Code (IaC): Terraform AWS CloudFormation Containerization & Orchestration: Docker Kubernetes (EKS, AKS, GKE) CI/CD Pipelines: Jenkins GitLab CI/CD Azure DevOps AWS Code Pipeline
• Experience integrating SSO, MFA, and identity federation for cloud and on-premises systems.
• Knowledge of USCB’s identity management policies, access control standards, and risk management practices.
• Knowledge of FedRamp, NIST 800-53, FISMA, CMMC and federal security standards for IAM systems
• Ability to work collaboratively and independently.
• Previous experience working at a federal government agency preferred
• Excellent verbal and written communication skills.
• Ability to pass required Federal background screening/security check, including basic and expanded investigations. Ability to obtain and maintain both government clearance and customer approval.
• U.S. citizenship required.

EDUCATION AND TRAINING

• Bachelor’s degree in information systems, Systems Engineering, Computer Science, or a related field (or equivalent certification or years of experience).
• Certified Cloud Security Professional (CCSP), Certified Identity and Access Manager (CIAM).
• AWS Certified Solutions Architect – Associate or Professional, Microsoft Certified: Azure Solutions Architect Expert, CompTIA Security+ or AWS Certified Security – Specialty, preferred

PHYSICAL REQUIREMENTS

• Candidates must reside in or within commutable distance of Suitland, Maryland.
• Prolonged periods of sitting at a desk and working on a computer. May need to lift up to 25 pounds occasionally.

WHO WE ARE

Tanaq Technical Services (TTS) strives to deeply understand and analyze our clients’ vision, needs, and requirements so we may provide alternative solutions, empowering them to choose the best resolution. We aim to achieve excellence by delivering on our commitments to our clients, employees, and partners.

ABOUT THE ROLE

We are seeking a Senior Cloud Systems Engineer (Identity Management Domain Services) to support our federal government customer. The Senior Cloud Systems Engineer will be responsible for the design, development, configuration, security, system analysis, and modernization of the Identity Management & Domain Services (IMDS) critical services that enable the customer’s network to function.
This position reports to head of a unit/department. The ideal candidate will have experience with cloud identity and access management (IAM), cloud security, modernization and automation of Federal IT cloud projects.
This is a hybrid remote position based in Suitland, Maryland, that will require some onsite work at the customer’s location. This position is contingent on contract award.

RESPONSIBILITIES

• Support modernization efforts through Cloud integration:
• Configure and manage IMDS CI/CD DevOps Pipelines
• Serves as the technical lead on special projects
• Collaborates with other OCIO teams on key initiatives
• Design and manage Cloud-Based Identity Management and Domain Services (IMDS)
• Design and implement enterprise infrastructure and platforms required for cloud computing.
• Ensure compliance and security in cloud environments, particularly with frameworks like FedRAMP, NIST 800-53, or CMMC for cloud connectivity and data transmission.
• Implement and manage hybrid cloud networks, integrating AWS and Azure VPCs with on-premises systems using IPsec VPNs and private connections.
• Utilize cloud networking services such as AWS Transit Gateway, Azure ExpressRoute, and software-defined networking (SDN) solutions.
• Analyze system requirements and ensure that systems will be securely integrated with current applications.
  Requirements: