ICAM Engineer - Identity, Credential, and Access Management

ICAM Engineer Identity, Credential, and Access Management This position is 100% Onsite. This position is in Arlington, VA, with occasional/situational travel. Certificate N/A Schedule 100% onsite Clearance US Citizens withDOD Top Secret Engineering & Deployment: Engineer, deploy, secure, and maintain complex, mission-critical identity systems specificallyForgeRock IdP/ICAM platforms across Linux-based environments to meet DoD, DISA, and federal standards. Integration & Federation: Integrate enterprise applications and directories (LDAP, Active Directory) with ICAM platforms using robust federation protocols (SAML, OAuth2, APIs) across cross-domain workflows and secure enclaves. Lifecycle & Access Control: Manage the complete identity and credential lifecycle (issuing, renewing, revoking, and automating workflows) to enforce strict Zero Trust access controls. Security & Compliance:Conductsystem hardening, log analysis, and vulnerability managemen t to support compliance with the Risk Management Framework (RMF) and participate in architectural and risk reviews. Operations & Troubleshooting: Diagnose and resolve escalated ICAM and ForgeRock issues within defined SLAs, conductingroot cause analysis, performance tuning, and active monitoring. Documentation & Metrics:Create and version-control key engineering artifacts (CONOPS, SOPs, API documentation, and workflow diagrams) while maintaining ICAM performance metrics and dashboards. Basic Qualifications BS in Computer Science, IT, or related discipline and 8+ years of systems engineering experience (or equivalent experience in lieu of degree). Active TS clearance with SCI eligibility Ability to obtain and maintain a CI Poly and Special Program Access. IAT Level II certification or higher (e.g., Security+ CE, CySA+, SSCP, CISSP). Hands on experience with federation technologies (SAML, OAuth2) and ZeroTrust identity principles. Experience engineering or administering the ForgeRock platform (AM, IDM, DS). Strong understanding of ICAM concepts, identity lifecycle management, and enterprise access controls. Experience with Windows and Linux systems administration, shell scripting, and troubleshooting. Preferred Qualifications Experience supporting DISA or DoD mission partners. Active TS/SCI with CI Poly preferred. Experience with any of the following: JISG Access Controls AWS cloud engineering, IAM, and security services Ansible playbooks and automated configuration management CI/CD pipelines (GitLab, Jenkins, etc.) Join a dynamic team where your ideas matter and your career thrives. #J-18808-Ljbffr RMantra Solutions