ICAM Engineer

Join a culture of empowerment and connectivity.

Learn the skills you need to accelerate your career.

Discover benefits that support your life and work.

Build mission-ready tech that protects the nation.

As an ICAM Engineer, you’ll integrate commercial cloud environments with agency enterprise services and identity architectures in secure, regulated, and mission-focused environments. You’ll design, deploy, secure, and operate OCI solutions while supporting identity federation, access management, Zero Trust, and cloud onboarding.

You’ll work with Oracle personnel, government stakeholders, security teams, and technical delivery teams to implement secure identity solutions, support authorization activities, and transition cloud capabilities into reliable operations.

What You’ll Work On:

• Design, deploy, secure, and operate OCI solutions involving identity, audit logging, network security, secrets and key management, and privileged access.
• Integrate cloud applications and services with agency enterprise IAM platforms, including NGA GEOAxIS or comparable capabilities.
• Implement federation, SSO, MFA, identity lifecycle provisioning and deprovisioning, RBAC, ABAC, and least-privilege access models.
• Configure and troubleshoot SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, LDAP, and Active Directory integrations.
• Manage token claims, attribute mapping, certificates, metadata exchange, and authentication-flow troubleshooting.
• Apply Zero Trust principles and develop secure identity designs, control implementations, test evidence, and operating procedures.
• Support RMF, ICD 503, and NGA A&A activities, including security-control implementation and assessment evidence.
• Coordinate solution architectures, resolve technical issues, and communicate identity, security, and operational risks to stakeholders.

Join us. The world can’t wait.

You Have:

• 8+ years of experience in identity and access management, cloud security engineering, or cybersecurity
• Experience integrating commercial cloud environments with agency-specific enterprise services and identity architectures
• Experience designing, deploying, securing, and operating OCI solutions
• Experience integrating applications and cloud services with enterprise IAM platforms such as GEOAxIS
• Experience implementing federation, SSO, MFA, identity lifecycle management, RBAC, ABAC, and least-privilege access
• Experience with SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, LDAP, Active Directory, token claims, attribute mapping, certificates, and metadata exchange
• Experience applying Zero Trust principles and supporting secure identity designs, control implementation, testing, and operating procedures
• Knowledge of RMF, ICD 503, and authorization processes
• Active TS/SCI clearance; willingness to take a polygraph exam

Nice If You Have:

• Experience supporting security assessments, authorization packages, control validation, or remediation tracking
• Experience integrating cloud and identity logs with enterprise monitoring or SIEM platforms
• Experience with Terraform, OCI Resource Manager, or comparable infrastructure-as-code and automated configuration tools
• Experience with Ping Identity, Microsoft Entra , Okta, or ADFS
• Experience supporting ICAM or cloud onboarding in classified, regulated, or other mission environments
• Possession of excellent stakeholder communication and troubleshooting skills
• Architecture, Security, Networking, or Cloud Operations Associate- or Professional-level OCI Certifications

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Compensation

At Booz Allen, we celebrate your contributions, provide you with…