Zero Trust ICAM Engineer

Booz Allen Hamilton•Fayetteville, NC

2d•$112,900 - $257,000•Onsite

About The Position

As an ICAM Engineer within the Department of War, you will design secure, scalable identity solutions that support national defense and safeguard mission-critical assets while advancing a zero-trust strategy. You will design scalable architectures, govern access policies, and enable integration across a broad IT ecosystem. The work covers Identity Providers (IdPs) for authentication and single sign-on, Identity Governance and Administration (IGA) for access controls, and Privileged Access Management (PAM) for protecting privileged accounts. You will modernize identity strategies and systems, support secure collaboration, and help ensure resilience against cyber threats. The role includes designing identity architectures and access strategies, securing identity lifecycles across on-premises, cloud, and hybrid environments, integrating identity technologies, and mentoring engineers. The position is located in Fayetteville, North Carolina, and is not listed as remote.

Requirements

At least 3 years of experience with ICAM suites, including IBM Verify Identity, Ping Identity, SailPoint, BeyondTrust, HashiCorp Vault, Entra, or Okta.
Experience with PAM architectures to secure credentials, record sessions, and enforce least privilege.
Experience with access controls such as RBAC and ABAC.
Experience scripting in Bash, PowerShell, JavaScript, or Python.
Knowledge of authentication mechanisms such as LDAP, SAML, OIDC, OAuth 2.0, Kerberos, and PKI.
Ability to troubleshoot network traffic, reverse-proxy routing, and API connections.
TS/SCI clearance.
High school diploma or GED.
DoW IAT Level II certification, such as CompTIA Security+ or CySA+.

Nice To Haves

Experience operating within DoW air-gapped networks.
Experience integrating IAM platforms with User and Entity Behavior Analytics (UEBA) for advanced risk scoring.
Experience with system integrations using JSON, REST, SCIM, and XML.
Experience mapping attributes across authoritative sources to create an identity.
Knowledge of DoW Zero Trust frameworks.
Knowledge of Windows and Linux administration.

Responsibilities

Design and implement identity architectures aligned with zero-trust principles.
Secure identity lifecycles across on-premises, cloud, and hybrid environments.
Create architecture products, design specifications, and technical requirements for identity and access strategies.
Evaluate and integrate IdP, IGA, and PAM technologies, including PING, SailPoint, and BeyondTrust.
Transform legacy identity systems into scalable, secure, and efficient platforms.
Mentor and develop engineers, fostering innovation and technical excellence.