Identity and Access Engineer (ICAM) Engineer

Leidos • Rockville, MD

4d • $87,100 - $157,450

About The Position

Leidos Digital Sector is seeking an Identity and Access (ICAM) Engineer to lead complex identity management solutions for large-scale government digital transformation initiatives. The ideal candidate will have deep expertise in Microsoft identity technologies and a proven track record of implementing advanced enterprise-level identity solutions.

Requirements

• Bachelor’s degree in computer science, Information Technology, or equivalent and 5 years of experience or Master’s with 3 plus years of general IT experience, preferably supporting system engineering. Additional years of experience may be substituted in lieu of degree.
• 5+ years of experience focusing on identity and access management.
• Experience in PIM and Azure AD Conditional Access policies.
• Hands-on experience with Microsoft identity solutions (Entra ID, AD FS, Microsoft 365, MIM).
• Proven experience in large-scale, multi-forest Active Directory and Entra ID architectures.
• Advanced knowledge of identity protocols (SAML, OAuth 2.0, OpenID Connect, WS-Federation, CBA).
• Strong experience with Azure AD B2B and B2C for external identity management.
• Proficiency in PowerShell and Graph API for identity management automation.
• Experience with Azure AD Connect, including custom synchronization rules.
• Familiarity with Zero Trust architecture and identity-related security best practices.
• US Citizen or US Person who has lived in the United States for at least three consecutive years and have the ability to obtain a Public Trust level 4 clearance

Nice To Haves

• Relevant Microsoft certifications (e.g., Microsoft 365 Certified: Enterprise Administrator Expert).
• Experience in government or highly regulated industries.
• Knowledge of identity-related compliance standards (e.g., NIST, FISMA).
• Experience with Azure AD Verifiable Credentials and decentralized identity concepts.
• Understanding of biometric authentication methods and their Azure AD integration.

Responsibilities

• Maintain Microsoft Entra ID solutions, including multi-tenant and cross-tenant synchronization for complex organizations.
• Implement migration strategies evolving identify and access management platforms (i.e. migration from on-premises Active Directory to Microsoft Entra ID Native authentication.)
• Implement advanced identity management solutions using Entra ID to optimize cost-efficiency and user experience.
• Assisted with custom identity management tools and automate identity lifecycle processes.
• Ensure identity solutions align with security, compliance, and business requirements.
• Stay current with the latest Microsoft identity technologies and industry best practices.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior