MP-ICAM​/Identity Engineer

• Advisor-level identity / ICAM engineering with DOD or Federal experience
• CAC/PIV, SAML, OAuth, OIDC, and Active Directory fluency
• PKI operations and certificate lifecycle management
• Experience with DOD MP-ICAM or an equivalent Federal identity platform

• Education & Experience:
  
  Bachelor's + 8 yrs;
  Master's + 6 yrs;
  PhD + 3 yrs;
  Associate's + 10 yrs; or 12 yrs experience without a degree.
• Federal facility access / background investigation clearance
• US. citizenship required.
• Signed Non-Disclosure Agreement (NDA) by Day 1.

• At least one prior MP-ICAM or equivalent Federal identity integration
• CISSP, Security+, or equivalent
• DoD 8570 IAT-II/III
• SailPoint, Okta, or Ping identity-platform certification

You speak DOD ICAM and PKI as a first language. CAC, SAML, OAuth, Active Directory — all of it, cleanly, for AFRH.

Advisor-level identity engineer for AFRH's DOD MP-ICAM integration — CAC/PIV, federation, directory, and privileged-access flows.

• Design and implement AFRH's identity integration with DOD MP-ICAM
• Configure CAC/PIV authentication, SAML/OAuth federation, and directory synchronization
• Partner with Cyber/ATO/MDIO on identity controls for the ATO package
• Support provisioning, deprovisioning, and privileged-access workflows
• Author identity architecture artifacts and transmit to Government

*** Contingent upon Contract award ***