Title: Senior Cyber Identity Engineer Location: Tampa United States Job Description: Job Category: Information Technology Time Type: Full time Minimum Clearance Required to Start: TS/SCI Employee Type: Regular Percentage of Travel Required: Up to 10% Type of Travel: Continental US - - * The Opportunity: CACI is looking for an experienced, innovative, and motivated Identity Engineer to work on Zero Trust (ZT) implementation efforts in support of U.S. Special Operations Command (USSOCOM), in Tampa, FL. This is a Senior-level cyber position on the Enterprise Development, Application and Training (EDAT) contract. The position may include partial telework, but work will primarily take place at the customer site. The Identity (Cyber) Engineer is a hands-on technical specialist responsible for the implementation, configuration, and management of the core platforms that secure user and system identities across the enterprise. This role focuses on the "hands-on-keyboard" execution of deploying and maintaining the security policies and controls within the organization's Identity Providers (IdP), Privileged Access Management (PAM), and Identity Governance and Administration (IGA) solutions. The ideal candidate will have deep technical expertise in one or more of these domains and a strong commitment to implementing least-privilege access in a complex hybrid environment. Responsibilities: - Identity Provider and Authentication Management: - Microsoft: Design, build, test, and deploy Microsoft Entra ID Conditional Access policies to enforce Zero Trust principles for access to cloud resources in Azure and AWS. Configure and maintain Certificate-Based Authentication (CBA) for CAC/PKI. Manage and troubleshoot the on-premises ADFS environment for legacy application support. - Ping Federate: Configure and manage the Ping Federate platform as an enterprise federation gateway. Onboard new applications for Single Sign-On (SSO) using SAML and OIDC. Build and maintain authentication policies to enforce strong, phishing-resistant MFA. - Privileged Access Management (PAM): - Delinea: Perform the hands-on onboarding of all privileged user, service, and application accounts into the Delinea vault. - Configure and enforce Delinea policies for credential rotation, session recording, and monitoring. - Build and implement Just-in-Time (JIT) and Just-Enough-Administration (JEA) access request and approval workflows to eliminate standing privileges. - Identity Governance and Administration (IGA): - SailPoint: Implement and configure the automation of the Joiner-Mover-Leaver (JML) identity lifecycle process, replacing manual, ticket-based systems. - Build and maintain the enterprise access catalog in SailPoint to replace the manual IMT48 form with an automated, workflow-driven request and approval system. - Configure and execute periodic access certification campaigns for critical applications and privileged roles. - AD and Linux Identity Management: - One Identity ARS: Use the Active Roles console to implement secure, delegated administration for Active Directory, creating policies to automate user/group lifecycle tasks. - Red Hat IdM: Centrally manage authorization policies for the Linux estate, defining Host-Based Access Control (HBAC) rules and sudo policies to control access to RHEL servers. Qualifications: Required: - Must hold a current Top-Secret clearance and be SCI eligible. - Education: MA/MS Degree. A bachelor's degree in computer science, Information Systems, Cybersecurity, or related field acceptable with additional experience. - 10+ years of experience in enterprise identity and access management architecture. Additional years of experience may be used in place of Education requirement. - Deep, hands-on experience with at least one of the following core platforms: Microsoft Entra ID, an enterprise PAM solution (e.g., Delinea), or an enterprise IGA solution (e.g., SailPoint). - Strong understanding of core identity security principles, including least privilege, MFA, JIT/JEA, and RBAC/ABAC. - Experience with Active Directory administration and group policy management. - Experience with integrating new technologies in a pre-production environment and overseeing transition into a production environment. - Ability to implement and troubleshoot complex security policies within enterprise tools. - DoD 8140 Compliance (IAT Level II) - DoDM 8570 IAT II equivalent certification (e.g. CompTIA Security+) Desired: - DoDM 8570 IAT III equivalent certification or higher (e.g. CompTIA CASP+, CISSP) - Microsoft Certified: Identity and Access Administrator (SC-300). - Delinea Certified Administrator. - SailPoint Certified IdentityNow Engineer. - Ping Certified Professional. - Experience with Red Hat IdM policy management. - Familiarity with Zero Trust Network Access (ZTNA) and continuous authentication models. - Prior experience supporting USSOCOM mission requirements. - Strong communication skills with ability to brief senior leadership and interface with stakeholders. - Ability to lead teams in complex, multi-vendor environments. - What You Can Expect: A culture of integrity. At CACI, we place character and innovation at the center of everything we do. As a valued team member, you'll be part of a high-performing group dedicated to our customer's missions and driven by a higher purpose - to ensure the safety of our nation. An environment of trust. CACI values the unique contributions that every employee brings to our company and our customers - every day. You'll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality. A focus on continuous growth. Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground - in your career and in our legacy. Pay Range: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits. The proposed salary range for this position is: $99,800 - $219,600 CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.

Contribute to agile teams by developing Java micro-services, enhancing code quality through testing, and collaborating on enterprise-scale web applications to deliver innovative software solutions efficiently and effectively.

Title: Full Stack Software Engineer - Agent Platform Locations: USA, GA, Atlanta Ireland, Dublin time type Full Time Hybrid job requisition id JR-0107451 Job Description: Your work days are brighter here. We're obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we're shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you'll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We're in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether you're building smarter solutions, supporting customers, or creating a space where everyone belongs, you'll do meaningful work with Workmates who've got your back. In return, we'll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you've found a match in Workday, and we hope to be a match for you too. About the Team As Workday accelerates its strategic evolution toward a consumption-based pricing model, the Platform Consumption Console (PCC) team is building the critical infrastructure to make it happen. We are the central nervous system for usage data across the enterprise. By engineering seamless data ingestion pipelines, pinpoint-accurate billing calculations, and transparent customer-facing controls, PCC empowers Workday to confidently launch flexible, usage-based products-like Workday Agents-that will drive the next generation of our global business growth. About the Role As a Full Stack Engineer in the PCC team, you'll help build the user-facing and platform experiences that increase trust AI agents .Working within a small, cross-functional pod, you'll design and ship full stack solutions-from intuitive front-end experiences to resilient backend services that integrate AI-driven capabilities deeply into HR and Finance workflows. Ground-Floor Enterprise Impact: You are joining at a pivotal inflection point. PCC is rapidly transitioning from a localized billing tool into a core piece of Workday's enterprise infrastructure. The work you do here will directly shape how Workday monetizes its products for years to come. Massive Technical Scale: This is not a maintenance role. You will tackle complex, high-stakes engineering and product challenges-from orchestrating the ingestion of massive daily usage metrics and ensuring zero-defect financial ledgers, to building intuitive, high-visibility dashboards for our enterprise customers. A "Startup Within a Giant" Culture: We are transitioning to a highly focused, domain-driven platform model. For builders who want to define strategy, establish new technical standards, and see the immediate impact of their work, this is the place to be. About You Basic Qualification (Mid-Level P3) - 5+ years experience in software development engineering including designing, developing, and deploying software solutions - 2+ years experience with a web development framework (Python or Java strongly preferred). - 2+ years experience with Backend development or Data Engineering, particularly within a cloud environment (AWS). Basic Qualification (Senior P4) - 8+ years experience in software development engineering including designing, developing, and deploying software solutions - 5+ years experience with a web development framework (Python or Java strongly preferred). - 5+ years experience with Backend development or Data Engineering, particularly within a cloud environment (AWS). - Bachelor's degree in Computer Science, Engineering, or related discipline, or equivalent practical experience. Other Qualification - Solid ability in Algorithmic Thinking, including distributed data processing and memory management, to design and implement efficient solutions for large-scale ETL transformations and PySpark job optimization. - Working knowledge of API Development, including RESTful principles and AWS API Gateway integration, and experience in building lightweight interfaces for backend service interaction. - Good understanding of Code Testing methodologies, such as unit testing for data pipelines and integration testing, and experience with PyTest or similar frameworks to ensure calculation accuracy. - Good understanding of Object-Oriented Design (OOD) principles like SOLID and modularity and their application in building reusable data transformation components. - Solid understanding of Software Development principles and proficiency in Python and Infrastructure as Code (specifically CloudFormation or AWS CDK). - Working experience with Source Control Management (SCM) tools such as Git and branching strategies like Trunk-Based Development, with a focus on collaborative CI/CD workflows. - Proven ability in Team Collaboration within a software development team, including active participation in code reviews and architectural whiteboarding. - Good skills in creating Technical Writing Documentation for state machine logic flows, ETL schemas, and deployment playbooks. Workday Pay Transparency Statement The annualized base salary ranges for the primary location and any additional locations are listed below. Workday pay ranges vary based on work location. As a part of the total compensation package, this role may be eligible for the Workday Bonus Plan or a role-specific commission/bonus, as well as annual refresh stock grants. Recruiters can share more detail during the hiring process. Each candidate's compensation offer will be based on multiple factors including, but not limited to, geography, experience, skills, job duties, and business need, among other things. For more information regarding Workday's comprehensive benefits, please click here. Primary Location: USA.GA.Atlanta Primary Location Base Pay Range: $130,400 USD - $195,600 USD Additional US Location(s) Base Pay Range: $123,900 USD - $222,000 USD Our Approach to Flexible Work With Flex Work, we're combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. We know that flexibility can take shape in many ways, so rather than a number of required days in-office each week, we simply spend at least half (50%) of our time each quarter in the office or in the field with our customers, prospects, and partners (depending on role). This means you'll have the freedom to create a flexible schedule that caters to your business, team, and personal needs, while being intentional to make the most of time spent together. Those in our remote "home office" roles also have the opportunity to come together in our offices for important moments that matter. Pursuant to applicable Fair Chance law, Workday will consider for employment qualified applicants with arrest and conviction records. Workday is an Equal Opportunity Employer including individuals with disabilities and protected veterans. Are you being referred to one of our roles? If so, ask your connection at Workday about our Employee Referral process! At Workday, we value our candidates' privacy and data security. Workday will never ask candidates to apply to jobs through websites that are not Workday Careers. Please be aware of sites that may ask for you to input your data in connection with a job posting that appears to be from Workday but is not. In addition, Workday will never ask candidates to pay a recruiting fee, or pay for consulting or coaching services, in order to apply for a job at Workday.

• Developing and supporting critical monitoring systems. • Helping external teams instrument and improve observability • Maintaining a large knowledge base and how-to guides for consumers of our platform • Helping to set a direction for the company’s monitoring strategy and reducing the operational burden for our team and company. • Influencing the team's road map and quarterly plans, balancing both platform needs, requests from users, and long term company goals.