Zero Trust ICAM Engineer
About The Position
As an ICAM Engineer within the Department of War, you will design and implement secure, scalable, adaptive identity solutions that support a zero-trust strategy and protect mission-critical assets. You will develop identity solutions across Identity Providers (IdPs), Identity Governance and Administration (IGA), and Privileged Access Management (PAM), strengthening authentication, access controls, and protection of privileged accounts. The role includes modernizing identity strategies, supporting secure collaboration, and building resilience against cyber threats across on-premises, cloud, and hybrid environments. You will create architecture products, design specifications, and technical requirements; evaluate and integrate identity technologies; transform legacy systems; and mentor engineers. The position requires TS/SCI clearance and a Department of War IAT Level II certification.
Requirements
- At least 3 years of experience with ICAM suites, including IBM Verify Identity, Ping Identity, SailPoint, BeyondTrust, HashiCorp Vault, Entra, or Okta.
- Experience with PAM architectures to secure credentials, record sessions, and enforce least privilege.
- Experience with access controls such as RBAC and ABAC.
- Scripting experience in Bash, PowerShell, JavaScript, or Python.
- Knowledge of authentication mechanisms such as LDAP, SAML, OIDC, OAuth 2.0, Kerberos, and PKI.
- Ability to troubleshoot network traffic, reverse proxy routing, and API connections.
- TS/SCI clearance.
- High school diploma or GED.
- Department of War IAT Level II certification, such as CompTIA Security+ or CySA+.
Nice To Haves
- Experience operating within Department of War air-gapped networks.
- Experience integrating IAM platforms with User and Entity Behavior Analytics (UEBA) for advanced risk scoring.
- Experience with system integrations using JSON, REST, SCIM, and XML.
- Experience mapping attributes across various authoritative sources to create an identity.
- Knowledge of Department of War Zero Trust frameworks.
- Knowledge of Windows and Linux administration.
Responsibilities
- Design and implement identity architectures aligned with zero-trust principles.
- Secure identity lifecycles across on-premises, cloud, and hybrid environments.
- Create architecture products, design specifications, and technical requirements for identity and access strategies.
- Evaluate and integrate IdP, IGA, and PAM technologies, including PING, SailPoint, and BeyondTrust.
- Transform legacy identity systems into scalable, secure, and efficient platforms.
- Mentor and develop engineers, fostering innovation and technical excellence.
Benefits
- Health, life, and disability benefits.
- Financial and retirement benefits.
- Paid leave.
- Professional development.
- Tuition assistance.
- Work-life programs.
- Dependent care.
- Recognition awards program.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
High school or GED
