Identity and Access Management Administrator

Job description

About Swoop: Swoop Technologies has a mission to organize and make accessible the world’s military and critical infrastructure. We are building a distributed operating system, SwoopOS, that decomposes the world’s equipment into a distributed robotic embodiment upon which a new generation of distributed systems, autonomous systems, and agentic AI can be built and deployed using our SDK, Valhalla, and operated via our browser, Surf. Imagine the world’s equipment - consisting of the electrical grid, communications architectures, manufacturing facilities, and militaries as a trapped supply of inputs possessing the potential to ensure Western military advantage, sovereign control of economically competitive manufacturing capacity, or the creation of a grid that fosters energy dominance. Swoop is liberating these trapped assets, allowing them to contribute to the world’s future as a series of building blocks to be combined at the speed of software, limited by only the hard constraints of physics and the soft constraints of safety. That is what Swoop is building. Not in the data center or cloud or edge on-premise computing node. In the physical world. This is a hybrid position that requires someone based in Washington DC who can work in-office 3+ days per week Your Impact: As our IAM Administrator, you will come in as the first full time IAM Administrator at Swoop. You will unify, transform and own our identity strategy. As an IAM Administrator you will be responsible for growing the core of the security architecture that ensures strong zero trust controls within the company. Your role will help protect sensitive defense and government data, which means the architecture you choose, the access policies you write, and the habits you instill early will shape how we scale securely for years to come. You'll work shoulder-to-shoulder with engineering, IT, and leadership rather than inside a large security team. Your decisions carry real weight and get implemented fast. If you want ownership over a foundational security role at a company whose customers are the U.S. military and allied partners, this is that role. What You’ll Do: - Transform and unify our identity as you see fit from on-premise resources through cloud and endpoints - Build automated onboarding, offboarding, and access-change workflows so provisioning becomes a painless and seamless process - Roll out single sign-on and multi-factor authentication across our tooling footprint - Implement role-based access control and least-privilege principles across cloud infrastructure, SaaS apps, and on premise infrastructure - Own periodic access reviews and audits, and build the reporting needed to demonstrate compliance to customers and auditors - Write and help mature the current identity and access policies, procedures, and documentation that need refinement or don't exist yet - Partner with engineering and leadership to support compliance efforts relevant to defense contractors. Swoop is required to support NIST SP 800-171 and NIST SP 800-207 - Serve as the go-to person for access-related incidents, questions, and troubleshooting across the company - Evaluate and integrate new tools and vendors as the company and headcount grow, keeping architecture decisions scalable rather than short-term patches You Should Have: - 3+ years of experience in identity and access management, security engineering, or a closely related IT security role - Hands-on experience deploying and administering an identity provider (e.g., Okta, Microsoft Entra ID(Azure AD), Active Directory, GWS Admin, or similar) - Solid working knowledge of LDAP, SSO, SAML, OAuth, and OIDC, and how to troubleshoot them when integrations break - Scripting or automation experience (Python, PowerShell, Terraform, or similar) to build workflows rather than click through admin consoles - A real understanding of zero-trust and least-privilege principles, not just as buzzwords but as things you've actually implemented - Comfort operating with ambiguity: you'll be defining processes and standards from scratch, not maintaining someone else's system - Familiarity with compliance frameworks relevant to government contractors, such as NIST 800-171, and NIST 800-207. - Strong written and communication skills in documentation and policy creation - Ability to work independently and prioritize across competing asks without a large team to delegate to - Familiarity working with Mac OS, Windows and Linux Bonus if you have: - Active US Security clearance or ability to obtain one - Prior experience at a defense-tech company, government contractor, or another organization supporting DoD/federal customers - Experience with privileged access management (PAM) tooling - Relevant certifications (CISSP, Security+, SC-300, or similar) - Exposure to identity governance and administration (IGA) platforms - Background in DevSecOps or working with infrastructure-as-code in a security context - Experience being an early or first security/IT hire at a startup, building programs from zero rather than optimizing an existing one - Direct experience supporting a CMMC or FedRAMP audit - MDM experience Swoop Technologies is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, age, national origin, disability, protected veteran status, gender identity or any other factor protected by applicable federal, state, or local laws.