Zero Trust ICAM Engineer

Zero Trust ICAM Engineer

The Opportunity:

At a certain level of expertise, designing secure, scalable, and adaptive identity solutions becomes second nature. With extensive experience across identity governance, identity providers, and privileged access management, you not only solve complex problems but also anticipate and mitigate future vulnerabilities. As an ICAM Engineer within the Department of War, you'll craft solutions that strengthen national defense and safeguard mission-critical assets while championing a zero-trust strategy.

Using your expertise, you'll design scalable architectures, govern access policies, and enable seamless integration across a vast IT ecosystem. You’ll develop solutions across Identity Providers (IdPs) to enhance authentication and SSO, Identity Governance and Administration (IGA) to enforce access controls, and Privileged Access Management (PAM) to protect privileged accounts from exploitation. Your leadership will modernize identity strategies, support secure collaboration, and ensure resilience against cyber threats.

What

You’ll Work On:

• Design and implement identity architectures aligned with zero trust principles.
• Secure identity life cycles across on-prem, cloud, and hybrid environments.
• Create architecture products, design specs, and technical requirements for identity and access strategies.
• Evaluate and integrate technologies for IdPs, IGA, and PAM systems like PING, SailPoint, and Beyond Trust.
• Transform legacy identity systems into scalable, secure, and efficient platforms.
• Mentor and develop engineers, fostering innovation and technical excellence.

On our team, you’ll go beyond solving present-day challenges, you’ll help shape the future of secure technology in national defense. You’ll secure systems, modernize identity frameworks, and strengthen the Department of War’s zero trust initiative, making a lasting impact on protecting critical infrastructure and advancing cyber defense. Together, we’ll create a safer, more resilient digital future. Join us. The world can’t wait.

You

Have:

• 3+ years of experience with ICAM suites including IBM Verify Identity, Ping Identity, SailPoint, Beyond Trust, Hashi Corp Vault, Entra, or Okta
• Experience with Privileged Access Management (PAM) architectures to secure credentials, record sessions, and enforce least-privilege
• Experience with access controls such as RBAC and ABAC
• Experience scripting in Bash, Power Shell, JavaScript, or Python
• Knowledge of authentication mechanisms such as LDAP, SAML, OIDC, Oauth
  2.0, Kerberos, and PKI
• Ability to troubleshoot network traffic, reverse proxy routing, and API connections
• TS/SCI clearance
• HS diploma or GED
• DOW IAT Level II Certification such as CompTIA Security+ or CySA+ Certification

Nice If You Have:

• Experience operating within DOW air-gapped networks
• Experience integrating IAM platforms with User and Entity Behavior Analytics (UEBA) for advanced risk scoring
• Experience with system integrations using JSON, REST, SCIM, and XML
• Experience with mapping attributes across various authoritative sources to create an identity
• Knowledge of DOW Zero Trust frameworks
• Knowledge of Windows and Linux administration
• Clearance:
  Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work‑life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional…