Identity & Access Management (ICAM) Engineer (TS/SCI Clearance Required)

North Point Technology•Chantilly, VA

10d

About The Position

North Point Technology is looking to hire a Senior ICAM Engineer to support the GEOAxIS modernization effort. The qualified candidate must have an active Top Secret (TS) security clearance and be eligible for SCI access, and will implement the Architect's designs and the Technical Lead's engineering direction to design, develop, integrate, test, and troubleshoot modernized ICAM capabilities. The ideal candidate is a strong hands-on contributor across multiple modernization workstreams with deep experience building secure, microservices-based identity and access solutions. This program requires employees to have an active TS clearance with eligibility to obtain SCI and CI Poly. If you have a Full Scope Poly, working this program will keep your Full Scope ACTIVE.

Requirements

Hands-on experience developing or integrating systems related to identity, authentication, authorization, or enterprise security
Experience implementing distributed systems or microservices architectures on modern platforms
Experience supporting Agile teams and contributing to iterative delivery of new capabilities
Active Top Secret security clearance; SCI eligibility required
Ability to obtain a CI polygraph after hire
Ability to obtain a DoD 8570-compliant certification (e.g., Security+) within 90 days of hire

Nice To Haves

Experience with Kubernetes or OpenShift for deployment and container orchestration
Programming experience with Java and/or Python
Familiarity with GitOps tools
Experience with Amazon Web Services (AWS), Linux, or containerization technologies
Knowledge of identity and access standards (X.509, SAML, OAuth2, OIDC, LDAP)
Experience with Oracle products or similar ICAM vendor technologies
Experience implementing ABAC/RBAC models, policy-based access controls, and Zero Trust-aligned authorization patterns
Experience supporting Intelligence Community (IC) or Department of War (DoW) systems, particularly authorization and identity-centric services

Responsibilities

Implements ICAM modernization designs for PEP/PIP, EMS, and RPMS components, aligning with established architectural patterns and guiding the transition from the legacy PDP to JBlocks.
Develops and integrates microservices that support identity, attributes, authorization, resource registration, and policy distribution.
Works with the Architect to translate high-level designs into detailed engineering tasks and system interfaces.
Supports the Technical Lead during Program Increment (PI) planning, backlog refinement, estimation, and risk identification.
Builds new PEP/PIP patterns such as enforcement endpoints, policy decision integrations, and attribute retrieval mechanisms.
Enhances EMS and RPMS with automation for resource and role lifecycle management, attribute orchestration, and policy ingestion.
Collaborates with DevOps engineers on CI/CD, containerization, and deployment to Kubernetes or the government's installed application platform.
Troubleshoots complex identity, authentication, authorization, and policy issues.
Contributes to design specifications, data flow diagrams, and interface definitions.
Participates in integration, operational readiness, and deployment validation across multiple environments and security domains.
Mentors junior engineers in secure coding and ICAM integration best practices.