Senior ICAM Engineer

Trinity Global Consulting; Chantilly; On-site; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Medical, Dental & Vision Coverage

Paid Time Off

Paid Holidays (11 federal)

Disability & Life Insurance

401(k) Retirement Plan

Professional Training

Job summary

Trinity Global Consulting (TGC) seeks a senior ICAM/identity security engineer to lead modernization efforts for PEP/PIP, EMS, and RPMS components. You will translate high-level designs into detailed engineering tasks, develop microservices for identity and policy distribution, and guide Agile teams through PI planning and risk management.

You will collaborate with architects, implement ABAC/RBAC patterns, and work with DevOps on CI/CD and containerization for Kubernetes environments.

Qualifications

• Bachelor's degree in STEM and 8+ years of relevant experience.
• Hands-on experience developing or integrating identity, authentication, authorization, or enterprise security systems.
• Experience implementing distributed systems or microservices architectures on modern platforms.
• Experience supporting Agile teams and iterative delivery of new capabilities.
• Ability to translate architectural guidance into detailed engineering tasks and artifacts.

Responsibilities

• Implement ICAM modernization designs and transition from legacy PDP to JBlocks.
• Develop and integrate microservices supporting identity, attributes, authorization, and policy distribution.
• Collaborate with Architect to translate designs into detailed engineering tasks and interfaces.
• Support Technical Lead with input during PI planning, backlog refinement, and risk identification.
• Develop patterns for PEP/PIP, including enforcement endpoints and attribute retrieval.
• Enhance EMS/RPMS services with automation for resource/role lifecycle and policy ingestion workflows.
• Coordinate with DevOps on CI/CD, containerization, and deployment to Kubernetes or gov platform.
• Troubleshoot complex identity, authentication, authorization, and policy issues across systems.
• Produce engineering documentation, including design specs and data flow diagrams.
• Ensure modernization reduces overhead and improves reliability and observability.
• Participate in integration testing, ORT testing, and deployment validation across environments.
• Mentor junior engineers and promote secure coding and ICAM best practices.

Skills

Identity systems

Microservices

Security-focused engineering

Systems integration

Education

Bachelor's degree in STEM

Tools

Kubernetes/OpenShift

AWS

Java

Python

GitOps tools

Job description

Duties May Include

• Implement ICAM modernization designs for PEP/PIP, EMS, and RPMS components, ensuring alignment with architectural patterns and modernization goals, including transition from the legacy PDP to JBlocks.
• Develop and integrate microservices supporting identity, attributes, authorization, resource registration, and policy distribution.
• Collaborate with the Architect to translate high-level designs into detailed engineering tasks, technical artifacts, and system interfaces.
• Support the Technical Lead by providing technical input during Program Increment (PI) planning, backlog refinement, work estimation, and risk identification.
• Develop new PEP/PIP patterns, including enforcement endpoints, policy decision integrations, and attribute retrieval mechanisms.
• Enhance EMS and RPMS services by implementing automation for resource/role lifecycle management, attribute orchestration, and policy ingestion workflows.
• Coordinate with DevOps engineers on CI/CD, containerization, infrastructure automation, and deployment to Kubernetes or the government's currently installed application platform.
• Troubleshoot complex identity, authentication, authorization, and policy-related issues across legacy and modernized components.
• Produce engineering documentation, including design specifications, data flow diagrams, configuration standards, and interface definitions.
• Ensure modernization activities reduce operational overhead and improve system reliability, maintainability, and observability.
• Participate in integration testing, operational readiness testing, and deployment validation across multiple environments and security domains.
• Mentor junior engineers and promote best practices in secure coding, microservices development, and ICAM integration.

Required Qualifications

• Bachelor's degree in a Science, Technology, Engineering, and Mathematics (STEM) field and 8+ years of relevant experience, or equivalent experience.
• Hands-on experience developing or integrating systems related to identity, authentication, authorization, or enterprise security.
• Experience implementing distributed systems or microservices architectures on modern platforms.
• Experience supporting Agile teams and contributing to iterative delivery of new capabilities.
• Ability to interpret architectural guidance and convert designs into high-quality, maintainable engineering solutions.
• Ability to obtain CompTIA Security+ within 90 days of hire.
• Active Top Secret security clearance upon hire with SCI eligibility.
• U.S. citizenship.

Desired Qualifications

• Experience with Kubernetes or OpenShift for deployment and container orchestration.
• Programming experience with Java and/or Python.
• Familiarity with GitOps tools.
• Experience with Amazon Web Services (AWS), Linux, or containerization technologies.
• Knowledge of identity and access standards: X.509, SAML, OAuth2, OIDC, LDAP.
• Experience with Oracle products or similar ICAM vendor technologies.
• Experience implementing ABAC/RBAC models, policy-based access controls, and Zero Trust‑aligned authorization patterns.
• Experience supporting Intelligence Community (IC) or Department of War (DoW) systems, particularly authorization and identity-centric services.

At Trinity Global Consulting (TGC), we value our employees and provide a comprehensive benefits package that includes:

• Medical, Dental & Vision Coverage – Coverage for eligible employees and family through CareFirst and VSP.
• Paid Time Off – PTO granted in accordance with contract requirements.
• Paid Holidays – 11 federal holidays observed annually.
• Disability & Life Insurance – Short-term/long-term disability, life insurance, and AD&D coverage included.
• 401(k) Retirement Plan – Competitive plan managed through Ameritas.
• Professional Training – Formal training provided as required, with additional learning opportunities based on role.