Zero Trust ICAM Engineer
About The Position
As an ICAM Engineer within the Department of War, you will design and implement secure, scalable identity solutions that advance zero-trust strategy and protect mission-critical assets. The role includes developing identity architectures and access policies, and integrating solutions across Identity Providers (IdPs), Identity Governance and Administration (IGA), and Privileged Access Management (PAM). You will help modernize identity strategies, support secure collaboration, and strengthen resilience against cyber threats across a broad IT ecosystem. You will secure identity lifecycles across on-premises, cloud, and hybrid environments; develop architecture products, design specifications, and technical requirements; evaluate and integrate identity technologies; transform legacy systems; and mentor engineers. The position supports the Department of War’s zero-trust initiative and national defense mission.
Requirements
- At least 3 years of experience with ICAM suites, including IBM Verify Identity, Ping Identity, SailPoint, BeyondTrust, HashiCorp Vault, Entra, or Okta.
- Experience with PAM architectures to secure credentials, record sessions, and enforce least privilege.
- Experience with access controls such as RBAC and ABAC.
- Experience scripting in Bash, PowerShell, JavaScript, or Python.
- Knowledge of authentication mechanisms such as LDAP, SAML, OIDC, OAuth 2.0, Kerberos, and PKI.
- Ability to troubleshoot network traffic, reverse-proxy routing, and API connections.
- Active TS/SCI clearance is required.
- High school diploma or GED.
- DoW IAT Level II certification, such as CompTIA Security+ or CySA+.
Nice To Haves
- Experience operating within DoW air-gapped networks.
- Experience integrating IAM platforms with User and Entity Behavior Analytics (UEBA) for advanced risk scoring.
- Experience with system integrations using JSON, REST, SCIM, and XML.
- Experience mapping attributes across various authoritative sources to create an identity.
- Knowledge of DoW Zero Trust frameworks.
- Knowledge of Windows and Linux administration.
Responsibilities
- Design and implement identity architectures aligned with zero-trust principles.
- Secure identity lifecycles across on-premises, cloud, and hybrid environments.
- Create architecture products, design specifications, and technical requirements for identity and access strategies.
- Evaluate and integrate technologies for IdPs, IGA, and PAM systems, including PING, SailPoint, and BeyondTrust.
- Transform legacy identity systems into scalable, secure, and efficient platforms.
- Mentor and develop engineers, fostering innovation and technical excellence.
Benefits
- Health, life, and disability benefits.
- Financial and retirement benefits.
- Paid leave.
- Professional development.
- Tuition assistance.
- Work-life programs.
- Dependent care.
- Recognition awards for exceptional performance and demonstration of company values.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
High school or GED
