Senior ICAM Engineer
About The Position
DAn Solutions is seeking a Senior Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services supporting secure mission applications and information sharing. The role focuses on identity federation, directory services, authentication, authorization, and application integration within DoD or Intelligence Community environments. The position provides full-time, on-site support at a government facility in Charleston, SC, or the Washington, DC Metropolitan Area. An active TS/SCI clearance is required, with the ability to obtain a CI Polygraph. The position may be filled at different Labor Category levels depending on the selected candidate’s qualifications and applicable contract requirements; compensation is determined based on the applicable LCAT and factors including education, relevant experience, certifications, and other required qualifications.
Requirements
- Active TS/SCI clearance and the ability to obtain a CI Polygraph.
- Bachelor's degree in Cybersecurity, Computer Engineering, Electrical Engineering, Mathematics, or a related technical discipline, or equivalent qualifications.
- At least 10 years of directly relevant experience.
- Previous Intelligence Community experience.
- Hands-on enterprise identity and access management experience.
- Experience with OIDC, identity federation, and application authentication.
- Experience integrating applications with identity providers and directory services.
- Strong Active Directory and LDAP experience.
- Knowledge of account lifecycle management, synchronization, and entitlement management.
- Experience developing APIs, scripts, or application integrations.
- Understanding of role-based and attribute-based access control.
- Ability to meet applicable cybersecurity workforce qualification requirements.
Nice To Haves
- Master's degree in a related discipline.
- CompTIA Security+ certification.
- Experience with PingFederate, Radiant Logic, SailPoint, Keycloak, Okta, or Secret Server.
- Experience migrating identity providers and modernizing directory services.
- Familiarity with SAML, OAuth 2.0, and SCIM.
- Go, Python, Ansible, or comparable automation experience.
- AWS GovCloud, Kubernetes, or OpenShift experience.
- PKI, certificate management, and Zero Trust architecture knowledge.
- Experience supporting identity services in DDIL environments.
Responsibilities
- Implement and integrate enterprise ICAM services with mission applications and directories.
- Develop APIs and integrations supporting identity data and access control decisions.
- Configure and troubleshoot single sign-on, federation, and OIDC authentication.
- Integrate identity platforms with Active Directory, LDAP, and authoritative identity sources.
- Automate user account provisioning, updates, and deprovisioning.
- Support migration from legacy identity platforms to modern identity services.
- Maintain virtual directory services and identity synchronization.
- Troubleshoot authentication failures, token claims, and authorization inconsistencies.
- Support identity federation across networks and mission partners.
- Apply encryption, access controls, and secure communications to identity data.
- Support identity services in constrained connectivity environments.
- Maintain system documentation, configuration baselines, and test procedures.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
