Sr Identity and Access Management (ICAM) Engineer

Leidos • Rockville, MD

4d • $107,900 - $195,050

About The Position

Leidos Digital Sector is seeking a senior Identity and Access Management Engineer to lead complex identity management solutions for large-scale government digital transformation initiatives. The role focuses on Microsoft identity technologies and advanced enterprise-level identity solutions.

The engineer will implement and maintain Microsoft Entra ID solutions, lead identity platform migrations, and build identity lifecycle tools and automation. The role also involves aligning identity solutions with security, compliance, and business requirements; supporting complex incident escalations; documenting standards and runbooks; mentoring junior engineers; and evaluating emerging Microsoft identity technologies.

Candidates must be U.S. citizens or U.S. persons who have lived in the United States for at least three consecutive years and must be able to obtain a Public Trust level 4 clearance.

Requirements

• Must be a U.S. citizen or U.S. person who has lived in the United States for at least three consecutive years.
• Must be able to obtain a Public Trust level 4 clearance.
• Bachelor’s degree in computer science, Information Technology, or equivalent and 8 years of experience, or a master’s degree with 6 or more years of general IT experience; additional years of experience may substitute for a degree.
• At least 5 years of experience focused on identity and access management, with demonstrated ownership of complex, enterprise-scale solutions.
• Experience with PIM and Azure AD Conditional Access policies.
• Hands-on experience with Microsoft identity solutions, including Entra ID, AD FS, Microsoft 365, and MIM.
• Proven experience with large-scale, multi-forest Active Directory and Entra ID architectures.
• Advanced knowledge of identity protocols, including SAML, OAuth 2.0, OpenID Connect, WS-Federation, and CBA.
• Strong experience with Azure AD B2B and B2C for external identity management.
• Proficiency in PowerShell and Graph API for identity management automation.
• Experience with Azure AD Connect, including custom synchronization rules.
• Working knowledge of Zero Trust architecture and identity-related security best practices.
• Ability to communicate technical designs and risks to technical and non-technical stakeholders.

Nice To Haves

• Relevant Microsoft certifications, such as Microsoft 365 Certified: Enterprise Administrator Expert, SC-300, or SC-100.
• Experience in government or highly regulated industries.
• Knowledge of identity-related compliance standards and frameworks, such as NIST 800-53, NIST 800-63, and FISMA.
• Experience with Azure AD Verifiable Credentials and decentralized identity concepts.
• Understanding of biometric authentication methods and their Azure AD integration.

Responsibilities

• Implement and maintain Microsoft Entra ID solutions, including multi-tenant and cross-tenant synchronization for complex organizations.
• Lead identity platform migrations, including planning, risk assessment, cutover, and rollback strategies for migrations from on-premises Active Directory to Microsoft Entra ID Native authentication.
• Lead and implement advanced Entra ID identity management solutions to optimize cost-efficiency and user experience.
• Design, build, and maintain custom identity management tools and automation for identity lifecycle processes, including joiner/mover/leaver, provisioning, and access certification.
• Ensure identity solutions align with security, compliance, and business requirements, and partner with security, infrastructure, and compliance teams on design decisions and risk trade-offs.
• Support technical escalations for complex identity incidents and perform root cause analysis.
• Develop documentation, standards, and runbooks, and mentor junior engineers.
• Evaluate emerging Microsoft identity technologies and industry best practices and recommend adoption where they add value.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior