ICAM Architect; Hybrid Security Clearance

Position: ICAM Architect (Hybrid) with Security Clearance
Job Title:

ICAM Architect

Location:

Hybrid – McLean, VA
Job Type: Direct Hire
Compensation: $86,800–$198,000 annually
Clearance Requirement:
Secret preferred/ability to obtain may be required
* This position is located in an area that requires special access. US citizenship required. Company:
The name of our partner organization will be disclosed during the interview
process. This is not a direct role with Launch Code; it is a position through Launch Code,
working with one of our partner companies.

Disclaimer: We are unable to provide work sponsorship for this role. We are unable to
consider candidates for this role who have a current or future work sponsorship need (this
includes those holding extended OPT Visas). Identity is at the center of modern cybersecurity—and we’re looking for an experienced
ICAM Architect to help design and strengthen enterprise identity environments supporting
mission-critical initiatives. This role is ideal for someone who enjoys solving complex identity and access challenges,
partnering with stakeholders, and building scalable enterprise authentication and access
solutions. You’ll play a key role in Identity, Credential, and Access Management (ICAM)
strategy with a strong focus on Identity and Access Management (IAM), federation, zero
trust, and enterprise identity lifecycle management. From single sign-on and federation to privileged access and passwordless authentication,
this is an opportunity to architect secure, enterprise-grade identity solutions that protect
critical systems while improving the user experience. You’ll work closely with engineering
teams and business stakeholders to understand access requirements, define identity
architecture, and implement solutions that enable secure access across complex
enterprise environments.

Key Responsibilities
• Architect and support enterprise ICAM and IAM solutions across large-scale environments
• Design and implement secure identity and access management solutions aligned with zero trust principles
• Partner with stakeholders and engineering teams to understand user roles, access requirements, and system dependencies
• Analyze and support the identity lifecycle including provisioning, authentication, access governance, and deprovisioning
• Design, deploy, and support identity systems that verify user privileges and secure access to enterprise applications and infrastructure
• Configure and support single sign-on (SSO), federation, multifactor authentication (MFA), and passwordless authentication capabilities
• Develop and troubleshoot custom integrations using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC)
• Support identity provider integrations with enterprise applications using REST APIs and automation workflows
• Integrate and synchronize identity platforms with Active Directory and LDAP environments
• Troubleshoot complex identity and federation issues including token validation, assertion mismatches, and connectivity issues
• Support identity automation and platform customization using scripting and development tools
• Contribute to identity architecture standards, documentation, and security best practices across the enterprise

Required Qualifications
• Experience with Okta or Microsoft Entra  certificate-based authentication
• Experience with SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC)
• Experience developing custom SAML, OAuth, and OIDC integrations and troubleshooting protocol exchanges
• Experience with development or automation languages such as Java, JavaScript, Python, Power Shell, or Groovy
• Experience integrating identity providers with external applications using RESTful APIs
• Experience integrating and synchronizing with Active Directory (AD) or LDAP environments
• Knowledge of Zero Trust architecture and experience implementing passwordless authentication or MFA
• Ability to resolve complex identity and federation issues in enterprise environments
• Strong understanding of IAM and enterprise authentication best practices
• High school diploma or GED required

Preferred Qualifications
• Experience with Okta Provisioning, Entra , Entra , and Workday integrations
• Experience with identity governance…