Job Requirements
Fort Meade, MD
Secret Polygraph not specified
Mid Level Career (5+ yrs experience)
$170,000 - $190,000
Job Description
ICAM SME / Engineer
Location: Fort Meade, MD — onsite five days per week
Salary: $170,000–$190,000
Clearance: Active Secret
Citizenship: U.S. citizenship required
Position Overview
We are seeking an experienced Identity, Credential, and Access Management (ICAM) SME / Engineer to design, implement, and support enterprise identity solutions across secure environments.
This role requires advanced technical expertise, analytical thinking, strong communication skills, and proven leadership abilities. The ICAM SME / Engineer will report to the Senior Cybersecurity Engineer and collaborate closely with the engineering team to improve identity management, strengthen security, and optimize system performance.
Responsibilities
Serve as the ICAM subject matter expert for Azure-based environments.
Implement, maintain, and optimize enterprise systems in alignment with organizational standards and standard operating procedures.
Monitor and manage installed systems, infrastructure, and directory services.
Configure, test, and maintain operating systems, application software, and system management tools.
Evaluate existing systems and provide technical guidance to IT support teams.
Lead the development and integration of customized software and hardware solutions.
Plan and implement automation to improve operational efficiency.
Design and maintain security controls to protect systems and ensure data integrity.
Ensure high availability of technical resources and maintain accurate system inventories.
Provide timely reporting and rapid response to system issues and outages.
Support enterprise directory development and enhancement, including LDAP schema design, object classes, attributes, queries, and group structures.
Develop integration solutions across directory and database systems.
Configure and support enterprise identity management systems, including role-based access, segregation of duties, workflow automation, and periodic access reviews.
Review and implement ICAM integration requirements in alignment with organizational goals and standards.
Collaborate with business and technical stakeholders to understand requirements and develop solutions.
Prepare technical standards, provide guidance, and collaborate with developers on solution design.
Create technical documentation, including product analyses, current-state and future-state architectures, and network and infrastructure diagrams.
Support ICAM technology migrations, including transitioning legacy applications to modern solutions.
Develop and present briefings and executive summaries on ICAM architecture, implementation, and policy.
Support security assessments, audits, and Authority to Operate (ATO) activities, including ICAM documentation and control evidence.
Perform other duties as assigned.
Required Qualifications
U.S. citizenship.
Active Secret security clearance.
Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or a related STEM discipline.
Ability to work onsite in Fort Meade, MD, five days per week.
At least 10 years of technical experience developing ICAM architectures and strategies using products such as Intercede MyID, SailPoint IdentityIQ, Okta, CyberArk, and PKI solutions.
Minimum DoD 8140 IAT Level II certification, such as CompTIA Security+, CySA+, GSEC, or SSCP.
Experience designing, implementing, and supporting ICAM solutions in Microsoft Azure cloud environments.
Experience configuring and troubleshooting:
SAML and OIDC federation.
OAuth and SCIM provisioning.
LDAP integrations and attribute mappings.
Partner identity connections.
Experience supporting multi-partner ICAM integrations, single sign-on, directory synchronization, access policies, and end-to-end identity flow troubleshooting across secure enterprise environments.
Strong PowerShell scripting skills.
Knowledge of ADFS, Azure Application Proxy, WPAD, and MFA technologies, particularly certificate-based authentication.
Deep knowledge of Active Directory, including domain controller maintenance and upgrades, Group Policy management, DNS, and core infrastructure.
Experience with Microsoft Entra ID, formerly Azure AD, including application registrations and SSO onboarding.
Experience managing Microsoft Intune policies.
Understanding of PKI technologies, including LDAP directories, hardware security modules, and OCSP, along with associated security best practices.
Experience working within large federal IT infrastructures.
Recent experience deploying identity and credential management solutions.
Knowledge of federal cybersecurity and Zero Trust policies, requirements, and standards.
Strong understanding of stakeholder requirements, system architecture, infrastructure implementation, documentation, configuration, and deployment.
Familiarity with applicable federal policies and standards, including HSPD-12 and NIST publications.
Excellent analytical, problem-solving, communication, and decision-making skills.
Ability to remain calm, decisive, and methodical under pressure.
Advanced proficiency with Microsoft Office and Microsoft 365 tools, including Word, Excel, PowerPoint, Teams, Outlook, and SharePoint.
Preferred Qualifications
Master’s degree in a STEM discipline.
Prior experience supporting DoD environments.
DoD 8140 IAT Level III or an advanced certification such as CISSP, CISM, GIAC GSLC/GSOM, or CEH.
Knowledge of IAM across on-premises and cloud architectures, including AWS and Azure.
Subject matter expertise in Ping Identity, particularly PingFederate and PingDirectory.
Experience aligning ICAM solutions with Zero Trust architecture requirements.
Familiarity with emerging technologies, including AI/ML and quantum security, and their cybersecurity applications.
Experience with:
Netwrix Auditor.
Splunk.
Quest Recovery Manager for Active Directory (RMAD).
SDM Change Manager for Group Policy (CMGP).
Knowledge of Microsoft Identity Manager (MIM).
Experience with federated identity and web services security, including SAML, ADFS, WS-Federation, and WS-Security.
Familiarity with Microsoft 365 and Microsoft Entra ID integration.
Ability to quickly learn new technologies and tools.
Location: Fort Meade, MD — onsite five days per week
Salary: $170,000–$190,000
Clearance: Active Secret
Citizenship: U.S. citizenship required
Position Overview
We are seeking an experienced Identity, Credential, and Access Management (ICAM) SME / Engineer to design, implement, and support enterprise identity solutions across secure environments.
This role requires advanced technical expertise, analytical thinking, strong communication skills, and proven leadership abilities. The ICAM SME / Engineer will report to the Senior Cybersecurity Engineer and collaborate closely with the engineering team to improve identity management, strengthen security, and optimize system performance.
Responsibilities
Serve as the ICAM subject matter expert for Azure-based environments.
Implement, maintain, and optimize enterprise systems in alignment with organizational standards and standard operating procedures.
Monitor and manage installed systems, infrastructure, and directory services.
Configure, test, and maintain operating systems, application software, and system management tools.
Evaluate existing systems and provide technical guidance to IT support teams.
Lead the development and integration of customized software and hardware solutions.
Plan and implement automation to improve operational efficiency.
Design and maintain security controls to protect systems and ensure data integrity.
Ensure high availability of technical resources and maintain accurate system inventories.
Provide timely reporting and rapid response to system issues and outages.
Support enterprise directory development and enhancement, including LDAP schema design, object classes, attributes, queries, and group structures.
Develop integration solutions across directory and database systems.
Configure and support enterprise identity management systems, including role-based access, segregation of duties, workflow automation, and periodic access reviews.
Review and implement ICAM integration requirements in alignment with organizational goals and standards.
Collaborate with business and technical stakeholders to understand requirements and develop solutions.
Prepare technical standards, provide guidance, and collaborate with developers on solution design.
Create technical documentation, including product analyses, current-state and future-state architectures, and network and infrastructure diagrams.
Support ICAM technology migrations, including transitioning legacy applications to modern solutions.
Develop and present briefings and executive summaries on ICAM architecture, implementation, and policy.
Support security assessments, audits, and Authority to Operate (ATO) activities, including ICAM documentation and control evidence.
Perform other duties as assigned.
Required Qualifications
U.S. citizenship.
Active Secret security clearance.
Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or a related STEM discipline.
Ability to work onsite in Fort Meade, MD, five days per week.
At least 10 years of technical experience developing ICAM architectures and strategies using products such as Intercede MyID, SailPoint IdentityIQ, Okta, CyberArk, and PKI solutions.
Minimum DoD 8140 IAT Level II certification, such as CompTIA Security+, CySA+, GSEC, or SSCP.
Experience designing, implementing, and supporting ICAM solutions in Microsoft Azure cloud environments.
Experience configuring and troubleshooting:
SAML and OIDC federation.
OAuth and SCIM provisioning.
LDAP integrations and attribute mappings.
Partner identity connections.
Experience supporting multi-partner ICAM integrations, single sign-on, directory synchronization, access policies, and end-to-end identity flow troubleshooting across secure enterprise environments.
Strong PowerShell scripting skills.
Knowledge of ADFS, Azure Application Proxy, WPAD, and MFA technologies, particularly certificate-based authentication.
Deep knowledge of Active Directory, including domain controller maintenance and upgrades, Group Policy management, DNS, and core infrastructure.
Experience with Microsoft Entra ID, formerly Azure AD, including application registrations and SSO onboarding.
Experience managing Microsoft Intune policies.
Understanding of PKI technologies, including LDAP directories, hardware security modules, and OCSP, along with associated security best practices.
Experience working within large federal IT infrastructures.
Recent experience deploying identity and credential management solutions.
Knowledge of federal cybersecurity and Zero Trust policies, requirements, and standards.
Strong understanding of stakeholder requirements, system architecture, infrastructure implementation, documentation, configuration, and deployment.
Familiarity with applicable federal policies and standards, including HSPD-12 and NIST publications.
Excellent analytical, problem-solving, communication, and decision-making skills.
Ability to remain calm, decisive, and methodical under pressure.
Advanced proficiency with Microsoft Office and Microsoft 365 tools, including Word, Excel, PowerPoint, Teams, Outlook, and SharePoint.
Preferred Qualifications
Master’s degree in a STEM discipline.
Prior experience supporting DoD environments.
DoD 8140 IAT Level III or an advanced certification such as CISSP, CISM, GIAC GSLC/GSOM, or CEH.
Knowledge of IAM across on-premises and cloud architectures, including AWS and Azure.
Subject matter expertise in Ping Identity, particularly PingFederate and PingDirectory.
Experience aligning ICAM solutions with Zero Trust architecture requirements.
Familiarity with emerging technologies, including AI/ML and quantum security, and their cybersecurity applications.
Experience with:
Netwrix Auditor.
Splunk.
Quest Recovery Manager for Active Directory (RMAD).
SDM Change Manager for Group Policy (CMGP).
Knowledge of Microsoft Identity Manager (MIM).
Experience with federated identity and web services security, including SAML, ADFS, WS-Federation, and WS-Security.
Familiarity with Microsoft 365 and Microsoft Entra ID integration.
Ability to quickly learn new technologies and tools.
group id: 10115143