ICAM Systems Engineer & Manager

Type of Requisition

Regular

Top Secret/SCI

Top Secret/SCI

None

IT Infrastructure and Operations

Active Directory Management, Identity Management (IdM), Multi-Factor Authentication (MFA), Zero Trust

None

5 + years of related experience

Yes

Serves as a senior operational leader and Team Lead overseeing enterprise Domain Services and Identity, Credential, and Access Management (ICAM) for the US BICES/US BICES X mission. Provides hand‑on leadership across Active Directory (AD), DNS/DHPC, group policy infrastructure, and core access control pillars within a mission critical, 24/7 globally distributed environment. Acts as an operational integrator among Domain Infrastructure, Cybersecurity, Operations, and Government partners to drive identity governance and transition legacy systems toward full Zero Trust compliance.

Role requires proactive operational support, emergency coordination, and a presence to resolve critical identity or authentication support when outages or emergency situations arise.

• Domain Services & ICAM Operations:
  Direct operations, engineering, and security hardening of enterprise Active Directory Domain Services (AD DS), core network infrastructure (DNS/DHCP), and Group Policy Architectures.
• Spearhead Identity lifecycle management, business continuity/disaster recover planning, and continuous compliance auditing to ensure system resilience.
• Drive the modernization of legacy directory structures into a Zero Trust framework, implementing Tiered Administration and secure micro segmentation boundary integrations.
• Oversee global authentication protocol life cycles, leading deprecation of insecure legacy protocols with integration to replace with Multi-Factor Authentication and continuous adaptive access controls.
• Manage user, administrative, and service accounts to adhere to security requirements and industry best practices.
• Provides direction and drives collaborative team troubleshooting during directory related incidents, authentication outages, and emergency response actives affecting mission services, including after-house support.
• Ensure the administrative and technical workforce adheres to identity governance processes, Attribute-Based Access Control (ABAC) baselines, and program requirement guidance.
• Guides operational oversight for project plans, vendors, communication to stakeholders, and issue escalation for issue mitigation as related to technologies and responsibilities.
• Develops, documents, implements, and reviews technical training and supporting operational procedures and processes for all assigned position task sets, providing oversight of robust onboarding training process.
• Participates in special projects as required.

Enforce infrastructure and directory compliance with NIST SP 800-207 Zero Trust Architecture standards. Enforce compliance with RMF, DISA STIGs, and Cybersecurity directives. Partner with security teams on continuous monitoring, audit readiness, and rapid vulnerability remediation. Manages a small team of admins and engineers.

• Must possess and maintain a TS/SCI Security Clearance.
• 5 Years supporting enterprise operations in mission-critical DOW/IC environments.
• 5+ Years leadership experience in identity management, Active Directory, or core domain services operations.
• Experience supporting globally distributed classified environments with DoD, IC, or coalition networks.
• Technical proficiency:
  Windows Server Administration, Active Directory Domain Services, Group Policy…