SME Systems Engineer (ICAM)

Govcio LLC • Alexandria, VA

3h • Hybrid

About The Position

GovCIO is hiring a highly experienced SME Systems Engineer to support Identity, Credential, and Access Management (ICAM) modernization activities for the U.S. Coast Guard. The role focuses on designing, engineering, and executing secure, identity-centric access control frameworks across legacy and modern enterprise architectures. The position is based in Alexandria, Virginia, and is hybrid.

The engineer will serve as a primary technical authority for enterprise identity management and access control. The position requires leading the modernization of legacy access controls, addressing federation and authentication needs, managing identity systems, implementing Zero Trust principles, and producing technical architecture and documentation. The required clearance is an active Secret clearance. The posted salary range is USD $135,000 to $178,000 per year.

Requirements

• High school education with 10 or more years of experience, or commensurate experience.
• DoD 8570 IAT Level II certification or higher, such as Security+ CE, CySA+, or a vendor-specific identity certification.
• Deep technical understanding of federated identity concepts, including SAML, OAuth, OIDC, and Active Directory/LDAP architecture.
• Hands-on experience managing Smart Card/Common Access Card (CAC) authentication and PKI certificate validation.
• Experience designing and applying federal Zero Trust identity guidelines (NIST SP 800-207) within enterprise networks.
• Active Secret clearance.

Nice To Haves

• Prior experience supporting U.S. Coast Guard or Department of Homeland Security identity management programs.
• Familiarity with integrating data governance frameworks with ICAM solutions to enforce data-level access controls.
• Direct experience with enterprise identity tools such as SailPoint, Okta, Microsoft Entra ID, or Ping Identity.
• Advanced knowledge of RESTful API authorization protocols, secure gateways, and data schema security standards.

Responsibilities

• Lead engineering, technical planning, and execution to modernize legacy access controls into ICAM solutions.
• Analyze federation, authentication, authorization, and single sign-on implications across enterprise networks.
• Configure, optimize, and manage identity directories, authentication protocols, and PKI systems.
• Architect and implement identity lifecycle workflows, privilege management controls, and automated user provisioning.
• Design and deploy Zero Trust identity principles across primary network hubs.
• Develop technical interfaces and integration patterns for identity compliance tracking across data tools.
• Conduct root cause analysis, privilege audits, and system performance tuning on identity management nodes.
• Identify security risks during identity platform migrations and design engineering workarounds.
• Develop and maintain technical documentation, architecture definitions, and ICAM data flows.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED