Senior ICAM Engineer (Top Secret/SCI with agreement to obtain CI Poly Clearance Required)
North Point Technology · Chantilly, VA · 1 mo ago
On-siteEngineeringFull-time
About the role
North Point Technology is seeking a Senior ICAM Engineer to join a high-impact Identity, Credential, and Access Management (ICAM) modernization effort. This is a short-term engagement of approximately seven months requiring an active Top Secret security clearance with SCI eligibility and willingness to obtain a polygraph within the customer's timeline. U.S. citizenship is required.
Responsibilities
- Implement ICAM modernization designs for PEP, PIP, EMS, and RPMS components, including transitioning from legacy Policy Decision Point (PDP) implementations to modern frameworks.
- Develop and integrate microservices supporting identity, attributes, authorization, resource registration, and policy distribution.
- Translate high-level architectural designs into detailed engineering tasks, technical artifacts, and system interfaces.
- Provide technical input during Program Increment planning, backlog refinement, work estimation, and risk identification in support of Agile delivery.
- Develop new PEP/PIP enforcement patterns—including enforcement endpoints, policy decision integrations, and attribute retrieval mechanisms.
- Enhance EMS and RPMS services through automation of resource and role lifecycle management, attribute orchestration, and policy ingestion workflows.
- Collaborate with DevOps engineers on CI/CD pipelines, containerization, infrastructure automation, and deployment to Kubernetes or equivalent government application platforms.
- Troubleshoot complex identity, authentication, authorization, and policy-related issues across legacy and modernized components.
- Contribute to engineering documentation including design specifications, data flow diagrams, configuration standards, and interface definitions.
- Participate in integration testing, operational readiness testing, and deployment validation across multiple environments and security domains.
- Mentor junior engineers and promote best practices in secure coding, microservices development, and ICAM integration.
Required Skills/Experience
- Hands-on development or integration of systems related to identity management, authentication, or authorization
- Design and implementation of distributed systems or microservices architectures on modern platforms
- Participation in Agile delivery teams, including PI planning, backlog refinement, and iterative capability delivery
- Interpretation of architectural guidance and conversion of designs into maintainable engineering solutions
Preferred Skills/Experience
- Kubernetes or OpenShift for container orchestration and application deployment
- Programming in Java and/or Python
- GitOps tooling and workflows
- Amazon Web Services (AWS), Linux, or containerization technologies (e.g., Docker)
- Identity and access standards including X.509, SAML, OAuth2, OIDC, and LDAP
- Oracle ICAM products or similar enterprise ICAM vendor technologies
- Implementation of ABAC/RBAC models, policy-based access controls, and Zero Trust-aligned authorization patterns
- Experience supporting Intelligence Community or Department of Defense identity and authorization systems
Qualifications
- Bachelor's degree in a Science, Technology, Engineering, or Mathematics (STEM) field, or equivalent experience
- Ability to obtain CompTIA Security+ within 90 days of hire
- Active Top Secret security clearance with SCI eligibility required at time of hire
- Must be willing and able to obtain a CI polygraph within the customer's required timeline
- U.S. citizenship required