Identity & Access Management (ICAM) Architect (TS/SCI Clearance Required)

North Point Technology•Chantilly, VA

10d•Onsite

About The Position

North Point Technology is looking to hire an ICAM Architect to support the GEOAxIS modernization effort. The qualified candidate must have an active Top Secret (TS) security clearance and be eligible for SCI access, and will provide the technical architectural oversight that keeps the modernization of legacy ICAM capabilities - Policy Enforcement Points, Policy Information Points, Enterprise Management Services, and Resource and Policy Management Services - strategically aligned, secure, and extensible. The ideal candidate has deep experience defining target architectures, guiding engineering teams, and mapping legacy-to-modern transitions across on-prem and cloud-ready environments. This program requires employees to have an active TS clearance with eligibility to obtain SCI and CI Poly. If you have a Full Scope Poly, working this program will keep your Full Scope ACTIVE.

Requirements

Active Top Secret security clearance; SCI eligibility required
Ability to obtain a CI polygraph after hire
Ability to obtain a DoD 8570-compliant certification (e.g., Security+) within 90 days of hire
Experience as a solutions architect, systems architect, or enterprise architect on complex modernization, security, or ICAM programs
Experience designing distributed systems, microservices architectures, and cloud-native solutions
Experience leading or supporting teams engaged in ICAM modernization, enterprise identity, or authorization and policy services
Experience with Agile methodologies, Program Increment (PI) planning, and architectural runway development

Nice To Haves

Experience with Kubernetes, OpenShift, or container orchestration platforms
Experience with Java and/or Python for modern development and integration
Knowledge of GitOps tools for managing modern environments
Expertise with identity and authorization standards (X.509, SAML, OAuth2, OIDC, LDAP)
Experience architecting ICAM solutions on Oracle or other enterprise-grade identity platforms
Experience defining ABAC/RBAC models, policy-as-code, and Zero Trust-aligned access patterns
Prior experience supporting NGA or Intelligence Community identity and authorization systems
Certification in an enterprise architecture framework (e.g., TOGAF)

Responsibilities

Provide architectural leadership across the PEP/PIP, EMS, and RPMS modernization, ensuring alignment with NGA's Zero Trust and ICAM strategic framework and guiding the transition from the legacy PDP to JBlocks.
Develop end-to-end architectural patterns for identity, attribute services, authorization flows, and policy distribution.
Partner with the Technical Lead to validate modernization roadmaps and integration strategies for microservices-based components.
Translate mission needs into technical requirements, sequence diagrams, data models, and interface specifications.
Design modern PEP/PIP interfaces that support attribute-based access control and dynamic policy evaluation.
Architect EMS and RPMS capabilities such as resource registration and policy lifecycle automation.
Provide guidance to DevOps and software teams on scalability, resilience, and security.
Conduct architectural reviews, risk assessments, and compliance verification.
Serve as a senior technical advisor to program management.