ICAM Engineer – Identity, Credential, and Access Management

ICAM Engineer Identity, Credential, and Access Management

This position is 100% Onsite. This position is in Arlington, VA, with occasional/situational travel.

N/A

100% onsite

US Citizens withDOD Top Secret

• Engineering & Deployment:
  Engineer, deploy, secure, and maintain
  complex, mission-critical identity systems specifically
  
  Forge
  
  Rock IdP/ICAM platforms across Linux-based environments to meet DoD, DISA, and federal standards.
• Integration & Federation:
  Integrate enterprise applications and directories
  (LDAP, Active Directory) with ICAM platforms using robust federation protocols (SAML, OAuth2, APIs) across cross-domain workflows and secure enclaves.
• Lifecycle & Access Control:
  Manage
  the complete
  identity and credential
  lifecycle
  (issuing, renewing, revoking, and automating workflows) to enforce strict Zero Trust access controls.
• Security & Compliance:
  
  Conduct system hardening, log analysis, and
  vulnerability managemen
  t to support compliance with the Risk Management Framework (RMF) and participate in architectural and risk reviews.
• Operations & Troubleshooting:
  Diagnose and resolve
  escalated ICAM and Forge Rock issues within defined SLAs, conductingroot cause analysis, performance tuning, and active monitoring.
• Documentation & Metrics:
  
  Create and version-control key
  engineering artifacts
  (CONOPS, SOPs, API documentation, and workflow diagrams) while maintaining ICAM performance metrics and dashboards.

• BS in Computer Science, IT, or related discipline and 8+ years of systems engineering experience (or equivalent experience in lieu of degree).
• Active TS clearance with SCI eligibility
• Ability to obtain and maintain a CI Poly and Special Program Access.
• IAT Level II certification or higher (e.g., Security+ CE, CySA+, SSCP, CISSP).
• Hands on experience with federation technologies (SAML, OAuth2) and Zero Trust identity principles.
• Experience engineering or administering the Forge Rock platform (AM, IDM, DS).
• Strong understanding of ICAM concepts, identity lifecycle management, and enterprise access controls.
• Experience with Windows and Linux systems administration, shell scripting, and troubleshooting.

• Experience supporting DISA or DoD mission partners.
• Active TS/SCI with CI Poly preferred.
• Experience with any of the following:
  
  JISG Access Controls
  
  AWS cloud engineering, IAM, and security services
  
  Ansible playbooks and automated configuration management
  
  CI/CD pipelines (Git Lab, Jenkins, etc.)

Join a dynamic team where your ideas matter and your career thrives.