Hybrid ICAM Security Engineer – Identity & Access Expert

Leidos Inc; Egg Harbor Township (NJ); Hybrid; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking an ICAM / Identity Engineer to support the L-CAP platform within the Homeland Sector. This hybrid role requires 3 days onsite and 2 days remote for commutable distances, with a path to 100% remote for non-commutable locations.

You will implement ICAM controls, integrate with government ICAM services, and enforce per-session authorization across distributed services, while building audit foundations for users and operations.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology or related field with 4+ years of relevant experience.
• Hands-on experience with OAuth 2.0 and OpenID Connect.
• Experience with enterprise identity providers and federation (Keycloak, Okta, Ping, Entra ID).
• Experience implementing RBAC and/or ABAC within distributed applications.
• Understanding of Zero Trust principles and per-session authorization.

Responsibilities

• Integrate L-CAP with government ICAM services using OAuth 2.0 and OpenID Connect.
• Implement identity federation and user stores (Keycloak or equivalent).
• Enforce per-session authentication and authorization across distributed services.
• Design and manage mTLS, service mesh identity, and certificate lifecycle.
• Implement RBAC/ABAC aligned to roles.
• Handle sign-in/out and time-on-position logging for operational users.
• Provide ICAM control evidence and logging for audits.
• Protect external endpoints via API gateway authorization.
• Support AI-assisted development and automation to improve delivery.

Skills

Java

Python

Go

Zero Trust

RBAC/ABAC

Audit logging

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology

Tools

Keycloak

Okta

Ping

Microsoft Entra ID

Kubernetes

mTLS

API gateway (Kong/Apigee)

Job description

Leidos is seeking an ICAM / Identity Engineer to support the L-CAP platform within the Homeland Sector. This hybrid role requires 3 days onsite and 2 days remote for commutable distances, with a path to 100% remote for non-commutable locations.

You will implement ICAM controls, integrate with government ICAM services, and enforce per-session authorization across distributed services, while building audit foundations for users and operations.