ICAM Engineer

Booz Allen Hamilton•Charleston, SC

1d•$86,800 - $198,000

About The Position

Booz Allen is seeking an Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services that support mission applications and secure information sharing in Department of Defense and Intelligence Community environments. The role combines identity federation, directory integration, account provisioning, and application development. The engineer will work with software developers, infrastructure engineers, and security personnel to connect identity services with mission systems and troubleshoot the configurations, interfaces, and application code involved in enterprise authentication, identity attributes, and authorization decisions. Applicants must have an active TS/SCI clearance and be willing to take a polygraph exam. The position is full-time by default under the posting’s employment-type guidance; the posting does not specify a workplace type or location. The projected annual compensation range is $86,800 to $198,000, and the posting will close within 90 days from its posting date. Booz Allen offers health, life, disability, financial, and retirement benefits, paid leave, professional development, tuition assistance, work-life programs, dependent care, and recognition awards. Eligibility for benefit programs is generally available to full-time and part-time employees regularly working at least 20 hours per week; employees below that threshold are eligible only for select offerings.

Requirements

At least 3 years of experience supporting ICAM, security operations, or identity governance programs.
Experience implementing, integrating, or operating enterprise identity and access management services.
Experience with identity federation, application authentication, and OIDC.
Experience integrating applications with identity providers, including configuring claims, identity attributes, and access mappings.
Experience with Active Directory and LDAP-based directory services.
Experience developing or modifying APIs, scripts, or application integrations that support identity services.
Knowledge of account lifecycle management, group provisioning, identity synchronization, and entitlement management.
Knowledge of role-based and attribute-based access control, least privilege, and protection of identity data.
Active TS/SCI clearance and willingness to take a polygraph exam.
High school diploma or GED.

Nice To Haves

Experience with advisory project management in an IT environment.
Experience with commercial off-the-shelf IAM tools, including Microsoft Identity Manager, SailPoint, Saviynt, or One Identity.
Experience with Splunk or the ELK stack.
Experience supporting enterprise IAM solution delivery projects.
Experience with project management, including schedules, complex problem resolution, or performance management.
Knowledge of troubleshooting processes and standards for IGA or PAM.

Responsibilities

Develop, integrate, and maintain enterprise identity services supporting mission applications and secure information sharing.
Connect identity services with mission systems in collaboration with software developers, infrastructure engineers, and security personnel.
Support identity federation, directory integration, account provisioning, and application development.
Troubleshoot configurations, interfaces, and application code related to enterprise authentication, identity attributes, and authorization decisions.