Senior ICAM Engineer

Resource Management Concepts • Charleston, SC

4d • Onsite

About The Position

Resource Management Concepts, Inc. (RMC) is seeking an Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services supporting mission applications and secure information sharing. The role combines identity federation, directory integration, account provisioning, and application development within Department of Defense and Intelligence Community environments. The engineer will collaborate with software developers, infrastructure engineers, and security personnel to connect identity services with mission systems and troubleshoot configurations, interfaces, and application code supporting authentication, identity attributes, and authorization decisions.

This full-time, on-site position is at a Government facility in Charleston, South Carolina. The position is contingent on contract award and position availability.

Requirements

• Active TS/SCI clearance with the ability to obtain a CI polygraph.
• Prior Intelligence Community support experience.
• Bachelor’s degree in Cybersecurity, Computer/Electrical/Electronics Engineering, or Mathematics with a computer science concentration, or equivalent.
• 10+ years of directly relevant experience.
• Experience implementing, integrating, or operating enterprise IAM services.
• Hands-on experience with federation, OIDC, and application integration, including claims, attributes, and access mappings.
• Experience with Active Directory, LDAP, identity lifecycles, provisioning, synchronization, and entitlements.
• Experience developing APIs, scripts, or integrations for identity services.
• Ability to troubleshoot authentication and authorization across applications, identity providers, directories, and networks.
• Knowledge of role- and attribute-based access controls, least privilege, and identity data protection.
• Experience documenting, testing, and managing changes in secure environments.
• Ability to meet applicable cybersecurity workforce qualifications.
• Availability to work full-time onsite at a Government facility.

Nice To Haves

• Master’s degree in a field listed above or equivalent.
• CompTIA Security+ certification.
• Experience with PingFederate, Radiant Logic, SailPoint, Keycloak, Okta, or Secret Server.
• Experience with identity-provider migrations, including application code, claims, tokens, and identity mappings.
• Experience with directory modernization, virtual directories, Microsoft Identity Manager, and legacy provisioning migrations.
• Experience with SAML, OAuth 2.0, and SCIM.
• Experience with Go, Python, Ansible, or similar integration and automation tools.
• Experience with AWS/GovCloud, Kubernetes, OpenShift, and DoD IL5 environments.
• Experience with PKI, certificate-based authentication, certificate lifecycle management, and secure credentials.
• Experience with cross-domain federation or identity services in DDIL environments.
• Experience with Zero Trust integration using identity attributes and policy-based access decisions.

Responsibilities

• Implement and integrate enterprise ICAM services with mission applications, directories, and authoritative identity and attribute sources.
• Develop and maintain APIs and service integrations that provide identity information and support access control decisions.
• Configure and troubleshoot identity federation, single sign-on, and application authentication using OIDC and other applicable standards.
• Integrate identity platforms with Active Directory, enterprise directories, and personnel and training systems.
• Automate account and group provisioning, updates, and deprovisioning while maintaining accurate identity attributes and access entitlements.
• Support migrations from legacy identity platforms to modern services while preserving configurations, identity mappings, provisioning behavior, and application functionality.
• Implement and maintain virtual directory services, identity data aggregation, synchronization, and replication.
• Work with application developers to resolve authentication failures, token and claim mapping issues, and authorization inconsistencies.
• Support identity federation across networks and mission partners, applying approved data-sharing restrictions and cross-domain transfer processes.
• Protect identity data through encryption, appropriate access controls, and secure service communications.
• Support identity services in environments with intermittent or limited connectivity, including approved caching and synchronization of identity and authorization information.
• Use automation and configuration management to establish consistent identity service deployments across environments.
• Maintain integration documentation, configuration baselines, test procedures, and operational guidance.

Benefits

• Career growth and investment in employee training, certification, and education.
• Tuition assistance.
• Certifications.
• Competitive paid vacation package.
• 11 paid federal holidays.
• High-quality, low-deductible healthcare plans.
• Pet insurance.
• Competitive 401K package.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior