ICAM Architect

SAIC is seeking a highly skilled and motivated ICAM Architect to design, implement, and optimize advanced Identity, Credential, and Access Management (ICAM) solutions for a mission-critical enterprise IT environment. This position supports the MAJESTIC Joint Program Office (JPO) Team and requires expertise in ICAM architecture and compliance with federal identity and access management standards, such as FICAM and Zero Trust Architecture principles.

Responsibilities

• Design and implement ICAM architectures that align with mission needs, Zero Trust principles, and compliance with FICAM.
• Develop workflows for identity lifecycle management, including provisioning, deprovisioning, and secure credentialing (e.g., PKI, PIV, CAC).
• Integrate on-premises, hybrid, and cloud identity solutions, leveraging technologies like SAML, OAuth, OpenID Connect, and LDAP.
• Deploy and manage SSO, MFA, and Privileged Access Management (PAM) solutions to enhance authentication and access security.
• Optimize secure access to applications and resources by designing RBAC/ABAC models and automating workflows with tools like Ansible, Terraform, or PowerShell.
• Monitor identity systems using tools like Splunk or other SIEM platforms to detect and respond to threats and anomalies.
• Collaborate with cross-functional teams to ensure seamless integration of ICAM systems into broader IT environments.
• Provide technical briefings, metrics, and status updates for leadership while maintaining comprehensive technical documentation.

Requirements

• Active TS/SCI clearance with the ability to obtain and maintain a TS/SCI with Poly.
• 10-15 years of professional experience managing and supporting enterprise-level IT environments.
• High School Diploma/GED required; Bachelor’s Degree in Cybersecurity, Computer Science, IT, or a related field preferred.
• Must satisfy Cybersecurity Workforce Framework (CWF) ID 443 (Network Analyst – Intermediate Level) requirements via one of the following:
  • CompTIA Cloud+
  • CompTIA Security+
  • GIAC Global Industrial Cyber Security Professional (GICSP)
  • GIAC Security Essentials Certification (GSEC)
  • Systems Security Certified Practitioner (SSCP)

Skills

• Deep expertise in identity federation, authentication, and authorization protocols (e.g., SAML, OAuth, OpenID Connect, Kerberos).
• Hands-on experience with Active Directory, Azure Active Directory, LDAP, and PKI-based systems.
• Proficient in designing and implementing Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models.
• Skilled in deploying and managing Single Sign-On (SSO) and Multi-Factor Authentication (MFA) using tools like Okta, Duo, or Ping Identity.
• Experienced with monitoring and detecting anomalies using identity analytics tools and SIEM platforms like Splunk.
• Strong background in scripting and workflow automation using tools such as PowerShell, Bash, or Terraform.

Preferred Qualifications

• Certified Information Systems Security Professional (CISSP) or equivalent.
• Microsoft Certified Security, Compliance, and Identity Fundamentals.
• Vendor-specific certifications for identity tools such as ForgeRock, Okta, Ping Identity, or SailPoint.
• Experience establishing ICAM within a Zero Trust Architecture (ZTA) framework.

Pay

Target salary range $120,001 - $160,000.

Schedule

• Full-Time
• Day Shift
• On-site in Springfield, VA (no remote work)
• Travel: Yes - 10% of the time