ICAM Engineer - Identity, Credential, and Access Management

This position is 100% Onsite. This position is in Arlington, VA, with occasional/situational travel.

Certificate

N/A

Location:

4800 Mark Center Drive, Alexandria, VA 22311

Schedule

100% onsite

Clearance

US Citizens with DOD Top Secret

Responsibilities Qualifications

• Engineering & Deployment: Engineer, deploy, secure, and maintain complex, mission-critical identity systems—specifically ForgeRock IdP/ICAM platforms—across Linux-based environments to meet DoD, DISA, and federal standards.
• Integration & Federation: Integrate enterprise applications and directories (LDAP, Active Directory) with ICAM platforms using robust federation protocols (SAML, OAuth2, APIs) across cross-domain workflows and secure enclaves.
• Lifecycle & Access Control: Manage the complete identity and credential lifecycle (issuing, renewing, revoking, and automating workflows) to enforce strict Zero Trust access controls.
• Security & Compliance: Conduct system hardening, log analysis, and vulnerability management to support compliance with the Risk Management Framework (RMF) and participate in architectural and risk reviews.
• Operations & Troubleshooting: Diagnose and resolve escalated ICAM and ForgeRock issues within defined SLAs, conducting root cause analysis, performance tuning, and active monitoring.
• Documentation & Metrics: Create and version-control key engineering artifacts (CONOPS, SOPs, API documentation, and workflow diagrams) while maintaining ICAM performance metrics and dashboards.

Basic Qualifications

• BS in Computer Science, IT, or related discipline and 8+ years of systems engineering experience (or equivalent experience in lieu of degree).
•  Active TS clearance with SCI eligibility
•  Ability to obtain and maintain a CI Poly and Special Program Access.
•  IAT Level II certification or higher (e.g., Security+ CE, CySA+, SSCP, CISSP).
•  Hands on experience with federation technologies (SAML, OAuth2) and ZeroTrust identity principles.
• Experience engineering or administering the ForgeRock platform (AM, IDM, DS).
• Strong understanding of ICAM concepts, identity lifecycle management, and enterprise access controls.
• Experience with Windows and Linux systems administration, shell scripting, and troubleshooting.

Preferred Qualifications

• Experience supporting DISA or DoD mission partners.
• Active TS/SCI with CI Poly preferred.
• Experience with any of the following:
  – JISG Access Controls
  – AWS cloud engineering, IAM, and security services
  – Ansible playbooks and automated configuration management
  – CI/CD pipelines (GitLab, Jenkins, etc.)