IAM / Zero Trust Cybersecurity Engineer
Posted Updated 2
views
About the role
XSI is seeking an IAM / Zero Trust Cybersecurity Engineer to design, implement, and maintain identity and access controls for the cybersecurity engineering team supporting the Congressional Budget Office (CBO). This is a sustained part-time role that surges during IAM discovery, control implementation, validation, and documentation.
What you'll do
- Design, implement, and maintain least-privilege access controls, RBAC, PAM, MFA, and authentication/authorization integrations across cloud, network, endpoint, and application environments.
- Configure and manage Entra ID / Azure AD, conditional access policies, identity provider integrations, and cloud IAM.
- Implement and govern privileged access using tools such as CyberArk, Delinea, Azure PIM, Okta, or SailPoint.
- Conduct access reviews; remediate excessive or standing permissions; govern service accounts.
- Drive MFA / passwordless rollout, group/role cleanup, identity logging, and audit evidence collection.
- Enforce Zero Trust principles across cloud, network, and endpoint environments.