Experienced ICAM Architect

Job Description

B&M Cyber is seeking an experienced Identity, Credential, and Access Management (ICAM) Architect to support the design, integration, and modernization of enterprise identity and access management capabilities for our Federal clients. The successful candidate will develop secure, scalable ICAM solutions that support business and mission requirements across on-premises, cloud, and hybrid environments.

\n

\n

Candidates must be able to obtain a security clearance and be willing to work onsite at Federal client locations in Washington, D.C. or Northern Virginia five (5) days per week. This position is contingent upon satisfaction of all applicable security requirements.

\n

\n

Responsibilities:

\n

\n
• Design current-state and target-state ICAM architectures, technical roadmaps, standards, and integration patterns.
\n
• Develop solutions for identity lifecycle management, provisioning, access reviews, authentication, authorization, federation, and credential management.
\n
• Support the implementation and integration of single sign-on, multifactor authentication, identity governance, privileged access management, and directory services.
\n
• Design role-based and attribute-based access controls consistent with least-privilege and Zero Trust principles.
\n
• Integrate ICAM capabilities across applications, enterprise infrastructure, cloud platforms, and authoritative identity sources.
\n
• Evaluate existing technologies and processes, identify security or interoperability gaps, and recommend improvements.
\n
• Develop architecture diagrams, technical specifications, process flows, implementation guidance, and other supporting documentation.
\n
• Coordinate with cybersecurity, infrastructure, cloud, application, and business stakeholders to define requirements and resolve technical challenges.
\n
• Provide technical guidance to implementation teams and communicate architecture decisions, risks, and recommendations to client leadership.
\n

\n

\n

Qualifications:

\n

\n
• At least five (5) years of experience designing, implementing, or supporting enterprise ICAM, IAM, or PKI solutions.
\n
• Strong understanding of authentication technologies within enterprise IT networks.
\n
• Knowledge of NIST SP 800-63, FICAM, HSPD-12, Federal Zero Trust requirements, and related cybersecurity standards.
\n
• Experience with SSO, MFA, PKI, PIV credentials, role-based access control, attribute-based access control, and privileged access management.
\n
• Experience with Microsoft Active Directory or Entra ID and one or more enterprise ICAM platforms, such as SailPoint, Okta, Ping Identity, CyberArk, or similar technologies.
\n
• Strong analytical, technical writing, presentation, and client communication skills.
\n
• Ability to work independently and collaboratively within a multidisciplinary technical team.
\n

\n

\n

Preferred Qualifications:

\n

\n
• Active Secret or Top Secret clearance.
\n
• Bachelor’s degree or higher in IT, Cybersecurity, or a related field.
\n
• Experience supporting Federal, law enforcement, defense, intelligence community, or similarly sensitive environments.
\n
• Experience with Federal ICAM solutions, PIV credentials, certificate lifecycle management, Zero Trust, or hybrid identity environments.
\n
• Experience with identity governance, certificate lifecycle management, hardware security modules, or cloud-native identity services.
\n
• Experience using scripting or automation to support identity provisioning, integrations, or access management workflows.
\n
• Current Certified Information System Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Cloud Security Professional (CCSP) or relevant Microsoft, Okta, SailPoint, CyberArk, or Ping Identity certification.
\n

\n

\n

Clearance Requirements

\n

Applicants selected will be subject to a security investigation. Final placement is contingent upon obtaining and maintaining the required eligibility and receiving Government approval. U.S. citizenship is required for this position in accordance with Federal requirements.

\n

\n

Equal Opportunity Employer

\n

B&M Cyber is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.

\n

\n

About Us

\n

B&M Cyber (B&M Consulting Group, Inc.) is a woman-owned small business (WOSB) with significant expertise and experience providing cybersecurity services to clients throughout the Federal government. We value collaboration, innovation, and continuous growth. Our employees work closely across corporate and client teams in a consulting environment to solve challenges and provide exceptional service. We foster a supportive environment where team members can share ideas, build new skills, and pursue the areas they are passionate about.