Senior ICAM Engineer

Description

POSITION:
Senior ICAM Engineer

WORK LOCATION:
Chantilly, VA

JOB CATEGORY:
Information Technology

JOB TYPE:
Full-Time

REQUISITION :
EM07-57

CITIZENSHIP:
United States Citizen

CLEARANCE TYPE:
Top Secret/SCI

TRAVEL REQUIREMENTS:
Up to
10%

E&M Technologies, Inc. is dedicated to recruiting and developing diverse, high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers’ mission and quest for professional growth. E&M provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do.

E&M Technologies, Inc. is currently seeking a Senior ICAM Engineer to join our team in Chantilly,
VA in support of the National Geospatial-Intelligence Agency. The NGA delivers world-class geospatial intelligence that provides a decisive advantage to policymakers, military service members, intelligence professionals, and first responders.

• Implement ICAM modernization designs for PEP/PIP/EMS and RPMS components, ensuring alignment with architectural patterns and modernization goals. Transition from the legacy PDP to JBlocks.
• Develop and integrate microservices supporting identity, attributes, authorization, resource registration, and policy distribution.
• Work closely with the Architect to translate high-level designs into detailed engineering tasks, technical artifacts, and system interfaces.
• Support the Technical Lead by providing technical input during Program Increment (PI) planning, backlog refinement, work estimation, and risk identification.
• Develop new PEP/PIP patterns including enforcement endpoints, policy decision integrations, and attribute retrieval mechanisms.
• Enhance EMS and RPMS services by implementing automation for resource/role lifecycle management, attribute orchestration, and policy ingestion workflows.
• Collaborate closely with Development and Operations (Dev Ops) engineers on Continuous Integration and Continuous Delivery (CI/CD), containerization, infrastructure automation, and deployment to Kubernetes or the governments currently installed application platform.
• Troubleshoot complex identity, authentication, authorization, and policy-related issues across legacy and modernized components.
• Contribute to engineering documentation including design specifications, data flow diagrams, configuration standards, and interface definitions.
• Ensure modernization activities reduce operational overhead and improve system reliability, maintainability, and observability.
• Participate in integration testing, operational readiness testing, and deployment validation across multiple environments and security domains.
• Mentor junior engineers and promote best practices in secure coding, microservices development, and ICAM integration.

• Bachelor’s degree in a Science, Technology, Engineering, and Mathematics (STEM) field and 8+ years of relevant experience, or equivalent experience.
• Hands‑on experience developing or integrating systems related to identity, authentication, authorization, or enterprise security.
• Experience implementing distributed systems or microservices architectures on modern platforms.
• Experience supporting Agile teams and contributing to iterative delivery of new capabilities.
• Ability to interpret architectural guidance and convert designs into high quality, maintainable engineering solutions.
• Ability to obtain Security+ within 90 days of hire.
• All candidates must be US CITIZENS to be considered for the position.
• Must have and be capable of maintaining a U.S. Department of Defense (DoD) security clearance at the required level and ability to pass a Counterintelligence Polygraph.

• Experience with Kubernetes or Open Shift for deployment and container orchestration.
• Programming experience with Java and/or Python.
• Familiarity with Git Ops tools.
• Experience with Amazon Web Services (AWS), Linux, or containerization technologies.
• Knowledge of identity and access standards: X.509, SAML, OAuth2, OIDC,…