Federal ICAM Lead Engineer — Identity, Access & PAM

Confidential; Washington (District of Columbia); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Total Rewards package

Comprehensive benefits

Job summary

KPMG LLP is seeking an experienced cybersecurity professional to lead the architecture, deployment, and management of ICAM solutions, shaping Zero Trust compliant access across cloud and on-prem environments.

You will mentor engineers, collaborate with federal clients, and translate mission requirements into ICAM roadmaps while ensuring SSO, MFA, and identity services align with NIST and FICAM standards.

Qualifications

• Five+ years in cybersecurity with IAM focus; U.S. Federal government consulting preferred.
• Bachelor's degree from an accredited college/university.
• Experience with federal ICAM programs and frameworks (FICAM, HSPD-12, NIST SP 800-53).
• Hands-on with IGA, SailPoint IdentityIQ/IdentityNOW, Okta, PAM (CyberArk).
• Certifications: CISSP, GSEC, GCED or CyberArk Delivery Engineer preferred.
• Cloud identity services (AWS/Azure/GCP) experience.

Responsibilities

• Lead architecture, deployment, and management of ICAM solutions (Okta, SailPoint, CyberArk).
• Develop and enforce access control policies aligned with Zero Trust and federal mandates.
• Engineer lifecycle for digital identities (provisioning, de-provisioning, reviews).
• Integrate ICAM with cloud and on-prem environments; mentor junior engineers.

Skills

IAM expertise

Federal contracting experience

Communication skills

Travel readiness

Security clearance

Education

Bachelor's degree

Tools

Okta

SailPoint IdentityIQ/IdentityNOW

CyberArk

SSO

PIV/CAC

Job description

KPMG LLP is seeking an experienced cybersecurity professional to lead the architecture, deployment, and management of ICAM solutions, shaping Zero Trust compliant access across cloud and on-prem environments.

You will mentor engineers, collaborate with federal clients, and translate mission requirements into ICAM roadmaps while ensuring SSO, MFA, and identity services align with NIST and FICAM standards.