Journeyman ICAM Administrator

Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS219, T3, Band 6 Job-Specific Essential Duties and Responsibilities: Operate, maintain, and sustain enterprise directory, federation, and Single Sign-On (SSO) services in support of DHS IT and OT environments, including on-premises, cloud, and hybrid systems. Serve as a Tier-2 ICAM engineer, troubleshooting complex authentication, identity, and access issues, and implementing approved configuration changes across directory and SSO platforms. Manage PIV-based multi-factor authentication (MFA) and ensure compliance with HSPD-12 requirements for logical access. Enforce role-based access control (RBAC) and least-privilege principles, including privileged account lifecycle management, audits, and support for privileged user training. Maintain comprehensive ICAM audit trails, ensuring logging, monitoring, and evidence collection support DHS compliance, cybersecurity operations, and audit readiness. Produce ICAM compliance, lifecycle, and metrics reporting, including inactive account identification, service account tracking, and annual service account credential resets. Develop and maintain detailed ICAM documentation, workflows, and standard operating procedures to support operational transparency, resilience, and knowledge transfer. Job-Specific Minimum Requirements: Hands‑on experience operating enterprise directory services and SSO/federation platforms. Experience supporting PIV-based MFA and HSPD-12 logical access compliance. Proven ability to manage privileged accounts, RBAC enforcement, and least‑privilege controls. Experience maintaining ICAM audit logs, lifecycle reporting, and compliance artifacts. Ability to identify inactive accounts, track service accounts, and manage annual credential resets. Experience supporting ICAM services across on‑premises, cloud, and hybrid environments. Familiarity with integrating ICAM operations with cybersecurity, incident response, and audit functions. Bachelor's degree in information systems, Computer Science, Cybersecurity, or a related field (or equivalent experience). 5+ years supporting enterprise identity, directory, or access management services. Preferred Skills and Qualifications: Experience supporting federal government environments. Familiarity with Zero Trust identity concepts and enterprise authentication modernization. Experience developing automated audit reporting and identity analytics dashboards. Strong documentation and stakeholder communication skills. Experience supporting ICAM‑related user and privileged access training initiatives. EEO Statement Maximus is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information and other legally protected characteristics. Accommodations Maximus provides reasonable accommodations to individuals requiring assistance during any phase of the employment process due to a disability, medical condition, or physical or mental impairment. If you require assistance at any stage of the employment process—including accessing job postings, completing assessments, or participating in interviews—please contact People Operations at View email address on click.appcast.io. Salary Minimum Salary: $50,000.00 Maximum Salary: $70,000.00 #J-18808-Ljbffr