Senior ICAM Engineer

Resource Management Concepts, Inc.•Charleston, SC

4d•Onsite

About The Position

Resource Management Concepts, Inc. (RMC) is seeking an Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services that support mission applications and secure information sharing. The role combines identity federation, directory integration, account provisioning, and application development in Department of Defense and Intelligence Community environments. The engineer will work with software developers, infrastructure engineers, and security personnel to connect identity services with mission systems and troubleshoot the configurations, interfaces, and application code that support authentication, identity attributes, and authorization decisions. This position is contingent on contract award and position availability. It is a full-time, on-site role at a Government facility in Charleston, South Carolina.

Requirements

Active TS/SCI clearance and ability to obtain a CI polygraph.
Prior Intelligence Community support experience.
Bachelor’s degree in Cybersecurity, Computer/Electrical/Electronics Engineering, or Mathematics with a computer science concentration, or equivalent.
10+ years of directly relevant experience.
Experience implementing, integrating, or operating enterprise IAM services.
Hands-on experience with federation, OIDC, and application integration, including claims, attributes, and access mappings.
Experience with Active Directory, LDAP, identity lifecycles, provisioning, synchronization, and entitlements.
Experience developing APIs, scripts, or integrations for identity services.
Ability to troubleshoot authentication and authorization across applications, identity providers, directories, and networks.
Knowledge of role- and attribute-based access controls, least privilege, and identity data protection.
Experience documenting, testing, and managing changes in secure environments.
Ability to meet applicable cybersecurity workforce qualifications.
Availability to work full-time onsite at a Government facility.

Nice To Haves

Master’s degree in a listed field or equivalent.
CompTIA Security+ certification.
Experience with PingFederate, Radiant Logic, SailPoint, Keycloak, Okta, or Secret Server.
Experience with identity-provider migrations, including application code, claims, tokens, and identity mappings.
Experience with directory modernization, virtual directories, Microsoft Identity Manager, and legacy provisioning migrations.
Experience with SAML, OAuth 2.0, and SCIM.
Experience with Go, Python, Ansible, or similar integration and automation tools.
Experience with AWS/GovCloud, Kubernetes, OpenShift, and DoD IL5 environments.
Experience with PKI, certificate-based authentication, certificate lifecycle management, and secure credentials.
Experience with cross-domain federation or identity services in DDIL environments.
Experience with Zero Trust integration using identity attributes and policy-based access decisions.

Responsibilities

Implement and integrate enterprise ICAM services with mission applications, directories, and authoritative identity and attribute sources.
Develop and maintain APIs and service integrations that provide identity information and support access-control decisions.
Configure and troubleshoot identity federation, single sign-on, and application authentication using OIDC and other applicable standards.
Integrate identity platforms with Active Directory, enterprise directories, and personnel and training systems.
Automate account and group provisioning, updates, and deprovisioning while maintaining accurate identity attributes and access entitlements.
Support migration from legacy identity platforms to modern services while preserving configurations, identity mappings, provisioning behavior, and application functionality.
Implement and maintain virtual directory services, identity data aggregation, synchronization, and replication.
Work with application developers to resolve authentication failures, token and claim mapping issues, and authorization inconsistencies.
Support identity federation across networks and mission partners, applying approved data-sharing restrictions and cross-domain transfer processes.
Protect identity data through encryption, appropriate access controls, and secure service communications.
Support identity services in environments with intermittent or limited connectivity, including approved caching and synchronization of identity and authorization information.
Use automation and configuration management to establish consistent identity service deployments across environments.
Maintain integration documentation, configuration baselines, test procedures, and operational guidance.