ICAM Engineer

Job Number: R0250214

About the role

As an ICAM Engineer, you’ll integrate commercial cloud environments with agency enterprise services and identity architectures in secure, regulated, and mission-focused environments. You’ll design, deploy, secure, and operate OCI solutions while supporting identity federation, access management, Zero Trust, and cloud onboarding. You’ll work with Oracle personnel, government stakeholders, security teams, and technical delivery teams to implement secure identity solutions, support authorization activities, and transition cloud capabilities into reliable operations. Join us. The world can’t wait.

Responsibilities

• Design, deploy, secure, and operate OCI solutions involving identity, audit logging, network security, secrets and key management, and privileged access.
• Integrate cloud applications and services with agency enterprise IAM platforms.
• Implement federation, SSO, MFA, identity lifecycle provisioning and deprovisioning, RBAC, ABAC, and least-privilege access models.
• Configure and troubleshoot SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, LDAP, and Active Directory integrations.
• Manage token claims, attribute mapping, certificates, metadata exchange, and authentication-flow troubleshooting.
• Apply Zero Trust principles and develop secure identity designs, control implementations, test evidence, and operating procedures.
• Support RMF, ICD 503, and A&A activities, including security-control implementation and assessment evidence.
• Coordinate solution architectures, resolve technical issues, and communicate identity, security, and operational risks to stakeholders.

Requirements

• 8+ years of experience in identity and access management, cloud security engineering, or cybersecurity
• Experience integrating commercial cloud environments with agency-specific enterprise services or identity architectures
• Experience designing, deploying, securing, or operating cloud-based solutions
• Experience integrating applications and cloud services with GEOAxIS or enterprise IAM platforms
• Experience implementing federation, SSO, MFA, identity lifecycle management, RBAC, ABAC, or least-privilege access
• Experience with SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, LDAP, Active Directory, token claims, attribute mapping, certificates, or metadata exchange
• Experience applying Zero Trust principles and supporting secure identity designs, control implementation, testing, or operating procedures
• Knowledge of RMF, ICD 503, or A&A processes, including security-control implementation and assessment