ICAM System Engineer

CACI

About The Position

CACI as a Prime Contractor on MWIII Bridge. All positions in Hanover, MD area. MWIII Bridge develops and supports Identity, Credential, and Access Management (ICAM) capabilities for the enterprise and stand-alone deployment throughout the IC. Tasks include program management, mission support, soft ware integration, soft ware development, system engineering, migration, testing, documentation development, network and system monitoring, configuration control and release management. Responsibilities: Systems Engineer that will be responsible for establishing and documenting feasible scenarios for the incorporation of Risk Adaptive Access Control (RADAC) into an existing enterprise scale Identity, Credential and Access Management (ICAM) system. Responsibilities will include: establishing criteria for data sources that can provide authoritative risk input. creating and documenting risk adaptive scenarios where access control attributes or policy decisions provided by enterprise authorization services would change based on identified risk. working with organizations to identify sources of risk information. working with organizations to identify how access control policies could be modified to include risk factors. the successful candidate will leverage expertise in requirements collection, requirements analysis, system architecture, and documentation in order to develop new cross organization concepts to define a path forward that incorporates the use of RADAC.

Requirements

TS/SCI with polygraph
Bachelor's Degree or higher in computer engineering or in a field related to the computer engineering or computer science disciplines is required.
8+ years of software engineering experience is required.
3+ years’ work experience in the SIGINT, IA, or IT domains is required.
4+ years of software engineering experience may be substituted for a bachelor’s degree, for a total of 12 years.

Nice To Haves

Experience with and/or understanding of:
Identity, Credential, and Access Management (ICAM)
Attribute Based Access Control (ABAC) – NIST SP 800-162 to include understanding of:
Policy Administration Point(PAP)
Policy Decision Point(PDP)
Policy Information Point(PIP)
Risk Adaptive Access Control (RADAC) as described in NIST SP 800-95
Requirements analysis, decomposition, and tracking
Excellent oral and written communication skills – able to clearly communicate and review architecture and design concepts.
Self motivated and able to take ownership of an initiative and form it from a blank slate.

Responsibilities

establishing criteria for data sources that can provide authoritative risk input.
creating and documenting risk adaptive scenarios where access control attributes or policy decisions provided by enterprise authorization services would change based on identified risk.
working with organizations to identify sources of risk information.
working with organizations to identify how access control policies could be modified to include risk factors.
the successful candidate will leverage expertise in requirements collection, requirements analysis, system architecture, and documentation in order to develop new cross organization concepts to define a path forward that incorporates the use of RADAC.