4548 ICAM Engineer

OVERVIEW:

We are seeking an experienced ICAM Engineer to support Identity, Credential, and Access Management (ICAM) capabilities within a government classified environment. You will provide primarily Tier 3 engineering and administration support for a Commercial Off-the-Shelf (COTS) ICAM/Privileged Access Management (PAM) solution. The ideal candidate will have hands-on experience administering and troubleshooting enterprise ICAM/PAM technologies, strong scripting and automation skills, and the ability to operate effectively in a highly secure, mission-critical environment. Experience with at least one of the following ICAM/PAM COTS platforms is required: Keycloak, RadiantLogic, or Idira (formerly CyberArk).

GENERAL DUTIES:

• Provide Tier 3 administration, engineering, troubleshooting, and operational support for enterprise ICAM/PAM COTS solutions.
• Administer, configure, maintain, and troubleshoot ICAM/PAM platforms in a classified government environment.
• Support identity lifecycle management, authentication, authorization, privileged access, and access control capabilities.
• Diagnose and resolve complex technical issues escalated from Tier 1 and Tier 2 support teams.
• Perform system configuration, upgrades, patching, integration, and ongoing maintenance of ICAM/PAM solutions.
• Develop and maintain scripts and automation to improve system administration, operational efficiency, and reliability.
• Integrate ICAM capabilities with enterprise applications, infrastructure, directories, and security services.
• Analyze system logs, troubleshoot authentication and authorization issues, and identify root causes of complex problems.
• Support system hardening and security configuration in accordance with government security requirements and applicable security policies.
• Develop and maintain technical documentation, standard operating procedures, configuration documentation, and troubleshooting guides.
• Collaborate with cybersecurity, systems engineering, network, application, and operations teams to resolve complex identity and access issues.
• Participate in testing, deployment, change management, and implementation activities for ICAM capabilities.
• Support incident response and remediation related to identity, authentication, authorization, and privileged access.
• Ensure ICAM systems remain operational, secure, and compliant with applicable government requirements.

REQUIRED QUALIFICATIONS:

• 4+ years of professional experience in identity and access management, cybersecurity, systems administration, or a related technical field.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline.
• Hands-on experience administering at least one enterprise ICAM/PAM COTS solution:
  • Keycloak
  • RadiantLogic
  • Idira (formerly CyberArk)
• Strong experience with scripting and automation, using technologies such as PowerShell, Python, Bash, or similar.
• Experience troubleshooting complex enterprise authentication, authorization, and access-management issues.
• Experience working in a secure or classified government environment.
• Strong understanding of identity and access management concepts, including authentication, authorization, RBAC, SSO, MFA, identity lifecycle management, and privileged access.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to work independently while collaborating effectively with cross-functional technical teams.

DESIRED QUALIFICATIONS:

• Experience supporting ICAM/PAM solutions within a DoD, DHS, or other federal government environment.
• Experience integrating ICAM platforms with enterprise directories such as Active Directory or LDAP.
• Experience with SAML, OAuth 2.0, and OpenID Connect (OIDC).
• Experience with REST APIs and API-based integrations.
• Experience with infrastructure automation, configuration management, or DevSecOps practices.
• Experience with Linux and Windows system administration.
• Experience supporting high-availability and enterprise-scale identity platforms.
• Familiarity with NIST, FISMA, FedRAMP, STIG, or other federal cybersecurity requirements.
• Experience developing automation for system monitoring, health checks, provisioning/deprovisioning, and operational support.

CLEARANCE:

• Active Top Secret clearance minimum required