ICAM Engineer

Booz Allen Hamilton•Washington, DC

1d•$86,800 - $198,000

About The Position

Booz Allen is seeking an Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services that support mission applications and secure information sharing in Department of Defense and Intelligence Community environments. The role combines identity federation, directory integration, account provisioning, and application development. The engineer will work with software developers, infrastructure engineers, and security personnel to connect identity services with mission systems. The position requires understanding how authentication, identity attributes, and authorization decisions operate across an enterprise, and troubleshooting the configurations, interfaces, and application code that support them. An active TS/SCI clearance is required, and the selected applicant must be willing to take a polygraph exam. The position offers an annualized projected compensation range of $86,800 to $198,000. Booz Allen describes benefits including health, life, and disability coverage; financial and retirement benefits; paid leave; professional development; tuition assistance; work-life programs; dependent care; and recognition awards. Eligible employees must work at least 20 hours per week on a regular basis to participate in benefit programs, though those below that threshold may qualify for select offerings.

Requirements

At least 3 years of experience supporting ICAM, security operations, or identity governance programs.
Experience implementing, integrating, or operating enterprise identity and access management (IAM) services.
Experience with identity federation, application authentication, and OIDC.
Experience integrating applications with identity providers, including configuring claims, identity attributes, and access mappings.
Experience with Active Directory and LDAP-based directory services.
Experience developing or modifying APIs, scripts, or application integrations supporting identity services.
Knowledge of account lifecycle management, group provisioning, identity synchronization, and entitlement management.
Knowledge of role-based and attribute-based access control, least privilege, and protection of identity data.
Active TS/SCI clearance and willingness to take a polygraph exam.
High school diploma or GED.

Nice To Haves

Experience with advisory project management in an IT environment.
Experience with COTS IAM tools, including Microsoft Identity Manager, SailPoint, Saviynt, or One Identity.
Experience with Splunk or ELK stack.
Experience supporting enterprise IAM solution delivery projects.
Experience with project management, including schedules, complex problem resolution, or performance management.
Knowledge of troubleshooting processes and standards for IGA or PAM.

Responsibilities

Develop, integrate, and maintain enterprise identity services supporting mission applications and secure information sharing.
Connect identity services with mission systems in collaboration with software developers, infrastructure engineers, and security personnel.
Troubleshoot configurations, interfaces, and application code that support authentication, identity attributes, and authorization decisions.
Implement, integrate, or operate enterprise identity and access management services.
Integrate applications with identity providers by configuring claims, identity attributes, and access mappings.
Develop or modify APIs, scripts, or application integrations supporting identity services.
Support account lifecycle management, group provisioning, identity synchronization, and entitlement management.