Navy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship.
The Principal IAM Engineer is a technical resource with intermediate or master level skills in the architecture, design, configuration, and management of Active Directory, Microsoft Entra, and modern authentication services.
Your success with attaining and performing the required skills and abilities will be enhanced if they consist of the following:
Responsibilities- Identity provider administration, design and maintenance for Active Directory Federation Services, Strata Identity Orchestrator, Active Directory Lightweight Directory Services, Entra ID
- Identity federation implementation (with internal/external workforce applications.
- Apply engineering principles into the design and enhancement of new and existing systems.
- Ensure the security and integrity of system and product solutions including compliance with Navy Federal and Information Security principles and practices.
- Present clear, organized, and concise information to all audiences through a variety of media to enable effective business decisions.
- Perform engineering tasks and assignments in support of business needs.
- Perform engineering technology research, procurement, deployment, and configuration for new and modified systems.
- Perform other duties as assigned.
- Bachelor’s Degree in Information Technology or the equivalent combination of education, training or experience
- 7-10 years of experience in identity security engineering
- Expert knowledge of identity security best practices surrounding account separation, JIT, least privilege, zero trust
- Hands-on experience designing and managing Active Directory infrastructure. As evidenced by at least 1 current certification (Microsoft Certified Solutions Associate, or Microsoft Certified Solutions Expert with a focus on server infrastructure.) or the equivalent experience and training.
- Solid understanding of design and implementation of modern authentication protocols, such as SAML, OIDC, FIDO, and PIV.
- Strong foundational knowledge of Active Directory infrastructure, protocols and authentication patterns: Domain Controllers, Group Policy, Sites/Services Topology, Replication, Kerberos
- Experience with the following:
- Microsoft Entra suite including:
- Conditional Access
- Azure SSO leveraging SAML/OIDC, Service Principals, and Agentic Identities
- Management of directory identity in Entra and M365, leveraging security policies, PIM, RBAC
- Identity Governance
- Defender for Identity
- Strata (Maverics) Identity Orchestration or similar
- Active Directory Federation Services
- Active Directory Lightweight Directory Services (AD-LDS)
- Microsoft Enterprise PKI leveraging OCSP
Azure AD Connect
Desired Qualifications
- Strong identity security mindset with a proven ability to design and operate identity solutions that prioritize security, compliance, and long-term resilience
- Advanced PowerShell Scripting techniques. Knowledge of Golang and YAML.
Additional Information
Hours:
- Monday - Friday, 8:00AM - 4:30PM (Operations will include 24x7 on-call systems support)
Location:
- 820 Follin Lane, Vienna, VA 22180
- 5510 Heritage Oaks Drive, Pensacola, FL 32526
- 141 Security Drive, Winchester, VA 22602
- 9999 Willow Creek Road San Diego, CA 92131
Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.
Our approach to careers is simple yet powerful: Make our mission your passion.
- FORTUNE 100 Best Companies to Work For® 2025
- Yello and WayUp Top 100 Internship Programs
- Computerworld® Best Places to Work in IT
- Newsweek Most Loved Workplaces
- 2025 PEOPLE® Companies That Care
- Newsweek Most Trustworthy Companies in America
- Military Times 2025 Best for Vets Employers
- Best Companies for Latinos to Work for 2025
- Forbes® 2025 America’s Best Large Employers
- Forbes® 2025 America's Best Employers for New Grads
- Forbes® 2025 America's Best Employers for Tech Workers
- 2025 RippleMatch Campus Forward Award Winner for Overall Excellence
- Military.com Top Military Spouse Employers 2025
- 2025 Handshake Early Talent Award
From Fortune. ©2025 Fortune Media IP Limited. All rights reserved. Used under license. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of, Navy Federal Credit Union.
Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to age, race, sex, color, religion, national origin, disability, veteran status, pregnancy, sexual orientation, genetic information, gender identity or any other basis protected by applicable law.
Accommodations: If you need accommodation or assistance for a qualifying condition to complete the online application (or during any stage of the hiring process), you can contact Navy Federal's Medical Accommodations team at [email protected] or by calling 1-888-503-6013. This team cannot provide any information on job postings or application status.
Disclaimers: Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team’s discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position. For additional details regarding compensation and benefits, review the Benefits page of the Navy Federal Career Site.
Protect Yourself from Job Scams: Navy Federal Credit Union jobs are posted on our career site, jobs.navyfederal.org and reputable job boards (e.g., LinkedIn, Indeed). We do not post jobs on social media marketplaces, messaging apps or unverified websites. We will never ask candidates for payment, bank details or personal financial information during the hiring process.
Bank Secrecy Act: Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.
Skills Required
- Bachelor's degree in Information Technology or equivalent combination of education, training, or experience
- 7-10 years of experience in identity security engineering
- Expert knowledge of identity security best practices (account separation, JIT, least privilege, zero trust)
- Hands-on experience designing and managing Active Directory infrastructure; current MCSA/MCSE certification or equivalent experience/training
- Solid understanding of modern authentication protocols (SAML, OIDC, FIDO, PIV)
- Strong foundational knowledge of Active Directory infrastructure, protocols, and authentication patterns (Domain Controllers, Group Policy, Sites/Services, Replication, Kerberos)
- Experience with Microsoft Entra suite (Conditional Access, Azure SSO, Service Principals, Agentic Identities, directory management in Entra and M365, security policies, PIM, RBAC)
- Experience with Identity Governance and Defender for Identity
- Experience with Strata (Maverics) Identity Orchestration or similar identity orchestration platforms
- Experience with Active Directory Federation Services (AD FS) and Active Directory Lightweight Directory Services (AD-LDS)
- Experience with Microsoft Enterprise PKI leveraging OCSP
- Experience with Azure AD Connect
- Willingness to provide 24x7 on-call systems support as part of operations
- Advanced PowerShell scripting (Desired)
- Knowledge of Golang and YAML (Desired)
Navy Federal Credit Union Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Navy Federal Credit Union and has not been reviewed or approved by Navy Federal Credit Union.
-
Retirement Support — A pension alongside a strong 401(k) match and additional retirement programs makes long‑term value a standout element of the total package. This combination is positioned as a differentiator among private employers.
-
Healthcare Strength — Comprehensive medical, dental, and vision coverage is complemented by on‑site health services at major campuses. Wellness resources and typical offerings like an EAP broaden the health support available.
-
Parental & Family Support — Paid parental leave, plus adoption and surrogacy assistance, indicate meaningful support for growing families. Education assistance further extends family and life‑stage support.
Navy Federal Credit Union Insights
What We Do
Navy Federal Credit Union is the world's largest credit union with over 12 million members, over $160 billion in assets and over 22,000 employees. As a credit union, we have members, not customers. At our campuses in Vienna, VA, Pensacola, FL and Winchester, VA, and in our more than 350 branches, we serve the men and women of the Armed Forces, Department of Defense, veterans and their families. We deliver world-class service, rooted in the belief that it is an honor and privilege to serve our members. We are committed to providing our members outstanding financial products and services. Navy Federal offers a career, not just a job. We are proud of the robust Total Rewards package we offer to our employees, including competitive salaries, incentive programs, comprehensive medical, dental and vision benefits, retirement plans with employer match, award-winning training programs, professional development programs, tuition assistance, paid leave, and work/life programs. Federally insured by NCUA. Equal opportunity employer. Android™ is a trademark of Google, Inc. iPhone® is a registered trademark of Apple, Inc. iPad® is a registered trademark of Apple, Inc. App Store(SM) is a service mark of Apple, Inc. Message and data rates may apply. FORTUNE and 100 Best Companies to Work For are registered trademarks of Time Inc., and are used under license. FORTUNE and Time Inc., are not affiliated with, and do not endorse products or services of, Navy Federal Credit Union. For more info, visit navyfederal.org
.png)
