ICAM Architect

Duties May Include

• Define and maintain the enterprise ICAM architecture across PEP/PIP, EMS, and RPMS modernization, ensuring alignment with NGA's Zero Trust and ICAM strategic framework, including transition from the legacy PDP to JBlocks.
• Develop end-to-end architectural patterns for identity, attribute services, authorization flows, policy distribution, and resource/role lifecycle management.
• Partner with the Technical Lead to validate modernization roadmaps, architectural decisions, and integration strategies for on-prem and cloud-native, microservices-based ICAM components.
• Translate mission needs into technical requirements, sequence diagrams, data models, interface specifications, and system architecture artifacts.
• Oversee the design of modern PEP/PIP interfaces supporting attribute-based access control, dynamic policy evaluation, and event-driven decision making.
• Architect improved EMS and RPMS capabilities, including resource registration, policy lifecycle automation, attribute orchestration, and enterprise authorization services.
• Provide architectural guidance to Dev Ops and Software teams to ensure solutions meet scalability, resilience, security, and maintainability requirements.
• Conduct architectural reviews, risk assessments, and compliance verification for modernization milestones and incremental releases.
• Ensure modernization reduces operational overhead through automation, standardization, improved observability, and optimized deployment pipelines.
• Identify opportunities for innovation in identity services, authentication technologies, authorization models, and system integration patterns.
• Serve as a senior advisor to program management, providing technical insight to support planning, budgeting, and customer engagement.

• Master's degree in a Science, Technology, Engineering, and Mathematics (STEM) field and 10+ years of relevant experience, or Bachelor's degree and 12+ years of relevant experience.
• Demonstrated experience as a solutions architect, systems architect, or enterprise architect supporting complex modernization, security, or ICAM programs.
• Significant experience designing distributed systems, microservices architectures, and cloud-native solutions.
• Experience leading or supporting teams engaged in ICAM modernization, enterprise identity technology, or authorization/policy services.
• Familiarity with Agile methodologies and experience contributing to Program Increment (PI) planning, architectural runway development, and iterative delivery.
• Ability to define architectural goals, strategic plans, and detailed implementation guidance aligned with mission priorities.
• Ability to obtain CompTIA Security+ within 90 days of hire.
• Active Top Secret security clearance upon hire with SCI eligibility.
• U.S. citizenship.

• Experience with Kubernetes, Open Shift, or container orchestration platforms.
• Experience with modern programming languages and integration (Java and/or Python).
• Knowledge of Git Ops tools for managing modern environments.
• Certifications in enterprise architecture frameworks.
• Expertise with identity and authorization standards (X.509, SAML, OAuth2, OIDC, LDAP).
• Experience architecting ICAM solutions using Oracle or other enterprise-grade identity platforms.
• Experience defining ABAC/RBAC models, policy-as-code, and Zero Trust–aligned access patterns.
• Prior experience supporting NGA or Intelligence Community authorization/identity systems.

At Trinity Global Consulting (TGC), we value our employees and provide a comprehensive benefits package that includes:

• Medical, Dental & Vision Coverage – Coverage for eligible employees and family through Care First and VSP.
• Paid Time Off – PTO granted in accordance with contract requirements.
• Paid Holidays – 11 federal holidays observed annually.
• Disability & Life Insurance – Short-term/long-term disability, life insurance, and AD&D coverage included.
• 401(k) Retirement Plan – Competitive plan managed through Ameritas.
• Professional Training – Formal training provided as required, with additional learning opportunities based on role.