Identity & Access Management (ICAM) Engineer (TS/SCI Clearance Required)

Responsibilities

• Implement ICAM modernization designs for PEP/PIP, EMS, and RPMS components, aligning with established architectural patterns.
• Develop and integrate microservices that support identity, attributes, authorization, resource registration, and policy distribution.
• Work with the Architect to translate high-level designs into detailed engineering tasks and system interfaces.
• Support the Technical Lead during Program Increment (PI) planning, backlog refinement, estimation, and risk identification.
• Build new PEP/PIP patterns such as enforcement endpoints, policy decision integrations, and attribute retrieval mechanisms.
• Enhance EMS and RPMS with automation for resource and role lifecycle management, attribute orchestration, and policy ingestion.
• Collaborate with DevOps engineers on CI/CD, containerization, and deployment to Kubernetes or the government's installed application platform.
• Troubleshoot complex identity, authentication, authorization, and policy issues.
• Contribute to design specifications, data flow diagrams, and interface definitions.
• Participate in integration, operational readiness, and deployment validation across multiple environments and security domains.
• Mentor junior engineers in secure coding and ICAM integration best practices.

Requirements

• Hands-on experience developing or integrating systems related to identity, authentication, authorization, or enterprise security.
• Experience implementing distributed systems or microservices architectures on modern platforms.
• Support Agile teams and contribute to iterative delivery of new capabilities.

Qualifications

• Active Top Secret security clearance; SCI eligibility required.
• Ability to obtain a CI polygraph after hire.
• Ability to obtain a DoD 8570-compliant certification (e.g., Security+) within 90 days of hire.