ICAM Architect

Trinity Global Consulting; Chantilly; On-site; EUR 90,000 - 150,000; Full time

Benefits offered by this job

Medical, Dental & Vision Coverage

Paid Time Off

Paid Holidays (11)

Job summary

Trinity Global Consulting is seeking a senior ICAM architect to lead enterprise identity and access modernization efforts. You will define architectures for authentication, authorization, and policy services, and drive cloud-native, microservices-based ICAM components across on-prem and cloud environments.

You will collaborate with the Technical Lead to validate roadmaps, ensure security posture, and align technical decisions with mission needs. U.S.

Qualifications

• 10+ years as solutions/enterprise architect for modernization or ICAM programs.
• Experience designing distributed systems and cloud-native solutions.
• Leadership in ICAM modernization and identity technology.
• Familiarity with Agile planning and PI execution.
• Ability to define architectural goals aligned with mission priorities.

Responsibilities

• Define and maintain enterprise ICAM architecture across modernization efforts.
• Develop end-to-end architectural patterns for identity, authorization, and policy services.
• Collaborate with Technical Lead on roadmaps, decisions, and integration strategies.
• Translate mission needs into technical requirements and system artifacts.
• Oversee design of PEP/PIP interfaces supporting ABAC, policy evaluation, and events.

Skills

ICAM architecture

Enterprise architecture

Distributed systems

Microservices

Agile methodologies

PI planning

Education

Master's degree in STEM

Bachelor's degree + 12+ years experience

Tools

Kubernetes

OpenShift

Java

Python

GitOps

Oracle or enterprise identity platforms

Job description

Duties May Include

• Define and maintain the enterprise ICAM architecture across PEP/PIP, EMS, and RPMS modernization, ensuring alignment with NGA's Zero Trust and ICAM strategic framework, including transition from the legacy PDP to JBlocks.
• Develop end-to-end architectural patterns for identity, attribute services, authorization flows, policy distribution, and resource/role lifecycle management.
• Partner with the Technical Lead to validate modernization roadmaps, architectural decisions, and integration strategies for on-prem and cloud-native, microservices-based ICAM components.
• Translate mission needs into technical requirements, sequence diagrams, data models, interface specifications, and system architecture artifacts.
• Oversee the design of modern PEP/PIP interfaces supporting attribute-based access control, dynamic policy evaluation, and event-driven decision making.
• Architect improved EMS and RPMS capabilities, including resource registration, policy lifecycle automation, attribute orchestration, and enterprise authorization services.
• Provide architectural guidance to DevOps and Software teams to ensure solutions meet scalability, resilience, security, and maintainability requirements.
• Conduct architectural reviews, risk assessments, and compliance verification for modernization milestones and incremental releases.
• Ensure modernization reduces operational overhead through automation, standardization, improved observability, and optimized deployment pipelines.
• Identify opportunities for innovation in identity services, authentication technologies, authorization models, and system integration patterns.
• Serve as a senior advisor to program management, providing technical insight to support planning, budgeting, and customer engagement.

Required Qualifications

• Master's degree in a Science, Technology, Engineering, and Mathematics (STEM) field and 10+ years of relevant experience, or Bachelor's degree and 12+ years of relevant experience.
• Demonstrated experience as a solutions architect, systems architect, or enterprise architect supporting complex modernization, security, or ICAM programs.
• Significant experience designing distributed systems, microservices architectures, and cloud-native solutions.
• Experience leading or supporting teams engaged in ICAM modernization, enterprise identity technology, or authorization/policy services.
• Familiarity with Agile methodologies and experience contributing to Program Increment (PI) planning, architectural runway development, and iterative delivery.
• Ability to define architectural goals, strategic plans, and detailed implementation guidance aligned with mission priorities.
• Ability to obtain CompTIA Security+ within 90 days of hire.
• Active Top Secret security clearance upon hire with SCI eligibility.
• U.S. citizenship.

Desired Qualifications

• Experience with Kubernetes, OpenShift, or container orchestration platforms.
• Experience with modern programming languages and integration (Java and/or Python).
• Knowledge of GitOps tools for managing modern environments.
• Certifications in enterprise architecture frameworks.
• Expertise with identity and authorization standards (X.509, SAML, OAuth2, OIDC, LDAP).
• Experience architecting ICAM solutions using Oracle or other enterprise-grade identity platforms.
• Experience defining ABAC/RBAC models, policy-as-code, and Zero Trust–aligned access patterns.
• Prior experience supporting NGA or Intelligence Community authorization/identity systems.

At Trinity Global Consulting (TGC), we value our employees and provide a comprehensive benefits package that includes:

• Medical, Dental & Vision Coverage – Coverage for eligible employees and family through CareFirst and VSP.
• Paid Time Off – PTO granted in accordance with contract requirements.
• Paid Holidays – 11 federal holidays observed annually.
• Disability & Life Insurance – Short-term/long-term disability, life insurance, and AD&D coverage included.
• 401(k) Retirement Plan – Competitive plan managed through Ameritas.
• Professional Training – Formal training provided as required, with additional learning opportunities based on role.