Identity and Access Engineer (ICAM) Engineer

Identity And Access (ICAM) Engineer

Leidos Digital Sector is seeking an Identity and Access (ICAM) Engineer to lead complex identity management solutions for large-scale government digital transformation initiatives. The ideal candidate will have deep expertise in Microsoft identity technologies and a proven track record of implementing advanced enterprise-level identity solutions.

Candidate MUST:

Be a US Citizen or US Person who has lived in the United States for at least three consecutive years and have the ability to obtain a Public Trust level 4 clearance

Primary Responsibilities:

• Maintain Microsoft Entra , including multi-tenant and cross-tenant synchronization for complex organizations.
• Implement migration strategies evolving identify and access management platforms (i.e. migration from on-premises Active Directory to Microsoft Entra e authentication.)
• Implement advanced identity management solutions using Entra  optimize cost-efficiency and user experience.
• Assisted with custom identity management tools and automate identity lifecycle processes.
• Ensure identity solutions align with security, compliance, and business requirements.
• Stay current with the latest Microsoft identity technologies and industry best practices.

Required Qualifications:

• Bachelor's degree in computer science, Information Technology, or equivalent and 5 years of experience or Master's with 3 plus years of general IT experience, preferably supporting system engineering. Additional years of experience may be substituted in lieu of degree.
• 5+ years of experience focusing on identity and access management.
• Experience in PIM and Azure AD Conditional Access policies.
• Hands-on experience with Microsoft identity solutions (Entra , AD FS, Microsoft 365, MIM).
• Proven experience in large-scale, multi-forest Active Directory and Entra .
• Advanced knowledge of identity protocols (SAML, OAuth 2.0, OpenID Connect, WS-Federation, CBA).
• Strong experience with Azure AD B2B and B2C for external identity management.
• Proficiency in Power Shell and Graph API for identity management automation.
• Experience with Azure AD Connect, including custom synchronization rules.
• Familiarity with Zero Trust architecture and identity-related security best practices.

Preferred Qualifications:

• Relevant Microsoft certifications (e.g., Microsoft 365 Certified: Enterprise Administrator Expert).
• Experience in government or highly regulated industries.
• Knowledge of identity-related compliance standards (e.g., NIST, FISMA).
• Experience with Azure AD Verifiable Credentials and decentralized identity concepts.
• Understanding of biometric authentication methods and their Azure AD integration.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.