Journeyman ICAM Administrator

Maximus is a trusted federal partner supporting mission‑critical programs across national security, defense, and public service delivery. Our work focuses on sustaining, operating, and improving essential government systems and services, with proven operational excellence, and a commitment to mission success for our customers.

Maximus is a trusted federal partner supporting mission‑critical programs across national security, defense, and public service delivery. Our work focuses on sustaining, operating, and improving essential government systems and services, with proven operational excellence, and a commitment to mission success for our customers.

Joining Maximus means becoming part of a collaborative, mission‑driven organization where teamwork, accountability, and professional growth are core to how we operate. We invest in our workforce through training, education, and career development, empowering professionals to deliver high‑impact solutions while contributing to outcomes that matter at a national scale.

This position is contingent upon contract award and position availability. Selected candidates will receive a contingent offer of employment, which will become final only upon successful contract award to Maximus, availability of the position, and receipt of authorization to proceed.

Ability to obtain and maintain a Public Trust is required. An active Public Trust and/or DHS suitability is preferred. U.S. citizenship or U.S. national status is required.

This is a remote position.

The Mid-level System Administrator will be supporting Identity, Credential, and Access Management (ICAM) services. The role focuses on Tier‑2 directory and SSO operations, PIV‑based MFA, privileged access controls, audit logging, and compliance reporting across on‑premises, cloud, and hybrid environments.

Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS
219, T3, Band 6

• Operate, maintain, and sustain enterprise directory, federation, and Single Sign-On (SSO) services in support of DHS IT and OT environments, including on‑premises, cloud, and hybrid systems.
• Serve as a Tier‑2 ICAM engineer, troubleshooting complex authentication, identity, and access issues, and implementing approved configuration changes across directory and SSO platforms.
• Manage PIV‑based multi‑factor authentication (MFA) and ensure compliance with HSPD‑12 requirements for logical access.
• Enforce role‑based access control (RBAC) and least‑privilege principles, including privileged account lifecycle management, audits, and support for privileged user training.
• Maintain comprehensive ICAM audit trails, ensuring logging, monitoring, and evidence collection support DHS compliance, cybersecurity operations, and audit readiness.
• Produce ICAM compliance, lifecycle, and metrics reporting, including inactive account identification, service account tracking, and annual service account credential resets.
• Develop and maintain detailed ICAM documentation, workflows, and standard operating procedures to support operational transparency, resilience, and knowledge transfer.

• Hands‑on experience operating enterprise directory services and SSO/federation platforms
• Experience supporting PIV‑based MFA and HSPD‑12 logical access compliance
• Proven ability to manage privileged accounts, RBAC enforcement, and least‑privilege controls
• Experience maintaining ICAM audit logs, lifecycle reporting, and compliance artifacts
• Ability to identify inactive accounts, track service accounts, and manage annual credential resets
• Experience supporting ICAM services across on‑premises, cloud, and hybrid environments
• Familiarity with…