Remote Access Control Engineer Jobs in Merced, CA

Description & Requirements

Maximus is a trusted federal partner supporting mission‑critical programs across national security, defense, and public service delivery. Our work focuses on sustaining, operating, and improving essential government systems and services, with proven operational excellence, and a commitment to mission success for our customers.

Joining Maximus means becoming part of a collaborative, mission‑driven organization where teamwork, accountability, and professional growth are core to how we operate. We invest in our workforce through training, education, and career development, empowering professionals to deliver high‑impact solutions while contributing to outcomes that matter at a national scale.

This position is contingent upon contract award and position availability. Selected candidates will receive a contingent offer of employment, which will become final only upon successful contract award to Maximus, availability of the position, and receipt of authorization to proceed.

Ability to obtain and maintain a Public Trust is required. An active Public Trust and/or DHS suitability is preferred. Must be a U.S. Citizen without dual citizenship.

This is a remote position.

The Mid-level System Administrator will be supporting Identity, Credential, and Access Management (ICAM) services. The role focuses on Tier‑2 directory and SSO operations, PIV‑based MFA, privileged access controls, audit logging, and compliance reporting across on‑premises, cloud, and hybrid environments.

Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS219, T3, Band 6

Job-Specific Essential Duties and Responsibilities:

- Operate, maintain, and sustain enterprise directory, federation, and Single Sign-On (SSO) services in support of DHS IT and OT environments, including on‑premises, cloud, and hybrid systems.
- Serve as a Tier‑2 ICAM engineer, troubleshooting complex authentication, identity, and access issues, and implementing approved configuration changes across directory and SSO platforms.
- Manage PIV‑based multi‑factor authentication (MFA) and ensure compliance with HSPD‑12 requirements for logical access.
- Enforce role‑based access control (RBAC) and least‑privilege principles, including privileged account lifecycle management, audits, and support for privileged user training.
- Maintain comprehensive ICAM audit trails, ensuring logging, monitoring, and evidence collection support DHS compliance, cybersecurity operations, and audit readiness.
- Produce ICAM compliance, lifecycle, and metrics reporting, including inactive account identification, service account tracking, and annual service account credential resets.
- Develop and maintain detailed ICAM documentation, workflows, and standard operating procedures to support operational transparency, resilience, and knowledge transfer.

Job-Specific Minimum Requirements:

- Hands-on experience operating enterprise directory services and SSO/federation platforms

- Experience supporting PIV‑based MFA and HSPD‑12 logical access compliance

- Proven ability to manage privileged accounts, RBAC enforcement, and least‑privilege controls

- Experience maintaining ICAM audit logs, lifecycle reporting, and compliance artifacts

- Ability to identify inactive accounts, track service accounts, and manage annual credential resets

- Experience supporting ICAM services across on‑premises, cloud, and hybrid environments

- Familiarity with integrating ICAM operations with cybersecurity, incident response, and audit functions

- Bachelor’s degree in information systems, Computer Science, Cybersecurity, or a related field (or equivalent experience)

- 5+ years supporting enterprise identity, directory, or access management services

Preferred Skills and Qualifications:

- Experience supporting federal government environments

- Familiarity with Zero Trust identity concepts and enterprise authentication modernization

- Experience developing automated audit reporting and identity analytics dashboards

- Strong documentation and stakeholder communication skills

- Experience supporting ICAM-related user and privileged access training initiatives

#techjobs #clearance #veteransPage #LI-remote

Minimum Requirements

TCS219, T3, Band 6

EEO Statement

Maximus is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information and other legally protected characteristics.

Pay Transparency

Maximus compensation is based on various factors including but not limited to job location, a candidate's education, training, experience, expected quality and quantity of work, required travel (if any), external market and internal value analysis including seniority and merit systems, as well as internal pay alignment. Annual salary is just one component of Maximus's total compensation package. Other rewards may include short- and long-term incentives as well as program-specific awards. Additionally, Maximus provides a variety of benefits to employees, including health insurance coverage, life and disability insurance, a retirement savings plan, paid holidays and paid time off. Compensation ranges may differ based on contract value but will be commensurate with job duties and relevant work experience. An applicant's salary history will not be used in determining compensation. Maximus will comply with regulatory minimum wage rates and exempt salary thresholds in all instances.

Accommodations

Maximus provides reasonable accommodations to individuals requiring assistance during any phase of the employment process due to a disability, medical condition, or physical or mental impairment. If you require assistance at any stage of the employment process-including accessing job postings, completing assessments, or participating in interviews,-please contact People Operations at applicantaccom@maximus.com .