IAM Software Engineer at Peraton

Job description

Required Qualifications • 5 years with BS/BA; 3 years with MS/MA; 0 years with Ph, 9 yeas with HS diploma • Must be able to obtain and maintain a Public Trust • U.S. Citizenship required • Experience designing, developing, and integrating RESTful APIs. • Strong knowledge of OAuth 2.0, OpenID Connect (OIDC), PKCE, and token management. • Experience implementing secure API authentication and authorization (JWT, access and refresh tokens). • Experience integrating with the Okta Identity Engine (OIE) and enterprise IAM services. • Experience integrating identity services with authoritative identity repositories. • Background in secure backend development using Java, Spring Boot, .NET, or similar frameworks. • Experience with API gateways, microservices, and backend orchestration. • Proficiency with JSON/XML and API contract development. • Experience implementing enterprise integration patterns and asynchronous messaging. • Understanding of authentication workflow orchestration and session management. • Experience building backend services supporting native mobile authentication. • Knowledge of API security best practices, OWASP API Security Top 10, mTLS, and certificate authentication. • Experience with databases and secure data access patterns. • Experience in CI/CD pipelines and DevSecOps environments. • Hands-on experience with unit, integration, and API testing tools (Postman, Swagger/OpenAPI). • Experience supporting enterprise ICAM/CIAM solutions in cloud or hybrid architectures. • Knowledge of NIST SP 800‑63 and Zero Trust Architecture. • Experience supporting RMF and STIG cybersecurity compliance. Preferred Qualifications • Experience integrating backend services with Okta Identity Engine Embedded SDK. • Experience supporting large-scale Federal ICAM/CIAM programs. • Knowledge of DoD identity services, CAC/PIV, derived credentials, or enterprise credentialing. • Experience with event-driven architectures or high‑security distributed systems. • Familiarity with DoD Zero Trust initiatives and identity modernization. Peraton is seeking an Identity Platform Integration Engineer to support the Department of Defense's next-generation enterprise Identity, Credential, and Access Management (ICAM) platform that is replacing DS Logon and providing secure authentication services for millions of Service Members, Veterans, Family Members, and Beneficiaries. The Alternative Multi-factor Authentication Support Services (AMASS) Program provides secure, scalable identity and access management services across the Department of Defense, enabling authentication, authorization, and digital identity interoperability for high visibility DoD systems. In this role you will specialize in identity integration, secure authentication services, and API development, not general-purpose backend application development. The ideal candidate has hands-on experience with modern IAM/ICAM standards, secure API design, enterprise identity services, and mission‑critical service integration within Federal environments. This is a 100% remote role. Responsibilities• Design, develop, and integrate RESTful APIs supporting identity workflows and partner application authentication.• Implement OAuth 2.0, OpenID Connect (OIDC), PKCE, and secure token management patterns.• Build secure API authentication and authorization services using JWT, access tokens, and refresh tokens.• Integrate backend services with the Okta Identity Engine (OIE), Okta Embedded SDK, and DoD enterprise IAM solutions.• Implement identity service integrations with authoritative identity repositories and enterprise data sources.• Develop secure backend web services using Java, Spring Boot, .NET, or equivalent technologies.• Support API gateway configurations, microservices architecture, and service orchestration patterns.• Implement JSON/XML data exchange models and develop API contracts supporting partner application consumption.• Apply enterprise integration patterns and asynchronous messaging (queues, events, service buses).• Design authentication workflow orchestration and session management services.• Develop backend services supporting mobile authentication for native iOS and Android applications.• Apply advanced API security practices, including OWASP API Security Top 10, mTLS, and certificate-based authentication.• Implement secure database integration and data access patterns. Develop reusable identity services supporting multiple Partner Applications.• Implement API Gateway integrations.• Implement enterprise audit logging and operational telemetry.• Contribute to CI/CD pipelines, automated builds, and DevSecOps processes.• Perform unit, integration, and API testing using tools such as Postman, Swagger/OpenAPI, or equivalent.• Participate in Agile development, Git-based version control, and secure configuration management.• Integrate enterprise ICAM/CIAM platforms in cloud or hybrid environments.• Ensure identity solutions comply with NIST SP 800-63 Digital Identity Guidelines and Zero Trust Architecture principles.• Support DoD cybersecurity requirements, including RMF and STIG compliance. Peraton is seeking an Identity Platform Integration Engineer to support the Department of Defense's next-generation enterprise Identity, Credential, and Access Management (ICAM) platform that is replacing DS Logon and providing secure authentication services for millions of Service Members, Veterans, Family Members, and Beneficiaries. The Alternative Multi-factor Authentication Support Services (AMASS) Program provides secure, scalable identity and access management services across the Department of Defense, enabling authentication, authorization, and digital identity interoperability for high visibility DoD systems. In this role you will specialize in identity integration, secure authentication services, and API development, not general-purpose backend application development. The ideal candidate has hands-on experience with modern IAM/ICAM standards, secure API design, enterprise identity services, and mission‑critical service integration within Federal environments. This is a 100% remote role. Responsibilities • Design, develop, and integrate RESTful APIs supporting identity workflows and partner application authentication. • Implement OAuth 2.0, OpenID Connect (OIDC), PKCE, and secure token management patterns. • Build secure API authentication and authorization services using JWT, access tokens, and refresh tokens. • Integrate backend services with the Okta Identity Engine (OIE), Okta Embedded SDK, and DoD enterprise IAM solutions. • Implement identity service integrations with authoritative identity repositories and enterprise data sources. • Develop secure backend web services using Java, Spring Boot, .NET, or equivalent technologies. • Support API gateway configurations, microservices architecture, and service orchestration patterns. • Implement JSON/XML data exchange models and develop API contracts supporting partner application consumption. • Apply enterprise integration patterns and asynchronous messaging (queues, events, service buses). • Design authentication workflow orchestration and session management services. • Develop backend services supporting mobile authentication for native iOS and Android applications. • Apply advanced API security practices, including OWASP API Security Top 10, mTLS, and certificate-based authentication. • Implement secure database integration and data access patterns. Develop reusable identity services supporting multiple Partner Applications. • Implement API Gateway integrations. • Implement enterprise audit logging and operational telemetry. • Contribute to CI/CD pipelines, automated builds, and DevSecOps processes. • Perform unit, integration, and API testing using tools such as Postman, Swagger/OpenAPI, or equivalent. • Participate in Agile development, Git-based version control, and secure configuration management. • Integrate enterprise ICAM/CIAM platforms in cloud or hybrid environments. • Ensure identity solutions comply with NIST SP 800-63 Digital Identity Guidelines and Zero Trust Architecture principles. • Support DoD cybersecurity requirements, including RMF and STIG compliance. Required Qualifications • 5 years with BS/BA; 3 years with MS/MA; 0 years with Ph, 9 yeas with HS diploma • Must be able to obtain and maintain a Public Trust • U.S. Citizenship required • Experience designing, developing, and integrating RESTful APIs. • Strong knowledge of OAuth 2.0, OpenID Connect (OIDC), PKCE, and token management. • Experience implementing secure API authentication and authorization (JWT, access and refresh tokens). • Experience integrating with the Okta Identity Engine (OIE) and enterprise IAM services. • Experience integrating identity services with authoritative identity repositories. • Background in secure backend development using Java, Spring Boot, .NET, or similar frameworks. • Experience with API gateways, microservices, and backend orchestration. • Proficiency with JSON/XML and API contract development. • Experience implementing enterprise integration patterns and asynchronous messaging. • Understanding of authentication workflow orchestration and session management. • Experience building backend services supporting native mobile authentication. • Knowledge of API security best practices, OWASP API Security Top 10, mTLS, and certificate authentication. • Experience with databases and secure data access patterns. • Experience in CI/CD pipelines and DevSecOps environments. • Hands-on experience with unit, integration, and API testing tools (Postman, Swagger/OpenAPI). • Experience supporting enterprise ICAM/CIAM solutions in cloud or hybrid architectures. • Knowledge of NIST SP 800‑63 and Zero Trust Architecture. • Experience supporting RMF and STIG cybersecurity compliance. Preferred Qualifications • Experience integrating backend services with Okta Identity Engine Embedded SDK. • Experience supporting large-scale Federal ICAM/CIAM programs. • Knowledge of DoD identity services, CAC/PIV, derived credentials, or enterprise credentialing. • Experience with event-driven architectures or high‑security distributed systems. • Familiarity with DoD Zero Trust initiatives and identity modernization.

Requirements

Must-haves

5 years with BS/BA; 3 years with MS/MA; 0 years with Ph, 9 yeas with HS diploma
Must be able to obtain and maintain a Public Trust
U.S. Citizenship required
Experience designing, developing, and integrating RESTful APIs.
Strong knowledge of OAuth 2.0, OpenID Connect (OIDC), PKCE, and token management.
Experience implementing secure API authentication and authorization (JWT, access and refresh tokens).
Experience integrating with the Okta Identity Engine (OIE) and enterprise IAM services.
Experience integrating identity services with authoritative identity repositories.
Background in secure backend development using Java, Spring Boot, .NET, or similar frameworks.
Experience with API gateways, microservices, and backend orchestration.
Proficiency with JSON/XML and API contract development.
Experience implementing enterprise integration patterns and asynchronous messaging.
Understanding of authentication workflow orchestration and session management.
Experience building backend services supporting native mobile authentication.
Knowledge of API security best practices, OWASP API Security Top 10, mTLS, and certificate authentication.
Experience with databases and secure data access patterns.
Experience in CI/CD pipelines and DevSecOps environments.

Nice-to-haves

Experience integrating backend services with Okta Identity Engine Embedded SDK.
Experience supporting large-scale Federal ICAM/CIAM programs.
Knowledge of DoD identity services, CAC/PIV, derived credentials, or enterprise credentialing.
Experience with event-driven architectures or high‑security distributed systems.
Familiarity with DoD Zero Trust initiatives and identity modernization.
This is a 100% remote role.
This is a 100% remote role.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

apijavaci/cdagile

Platform: peraton
Effort: medium