Hybrid ICAM Systems Engineer - Azure AD B2C & CIAM

GovCIO; Alexandria (VA); Hybrid; USD 135,000 - 172,000; Full time

Job summary

GovCIO is hiring a SME Systems Engineer specializing in Federation & Interoperability (FI) with a primary focus on Customer Identity and Access Management (CIAM) via Azure AD B2C for the U.S. Coast Guard (USCG).

Located in Alexandria, VA, this hybrid role designs and executes secure, identity-centric access controls across both legacy and modern enterprise architectures. The position emphasizes PKI, MFA, SSO, and Zero Trust principles per NIST SP 800-207, with enterprise-wide ICAM modernization

Qualifications

• DoD 8570 IAT Level II or higher certification required.
• Deep understanding of federated identity concepts (SAML, OAuth, OIDC) and AD/LDAP architecture.
• Hands-on engineering experience with CAC authentication and PKI certificate validation.
• Proven experience applying NIST SP 800-207 Zero Trust guidelines within enterprise networks.

Responsibilities

• Lead modernization of legacy access controls into robust ICAM solutions.
• Manage enterprise directories, federation, authentication, authorization, and SSO protocols.
• Architect identity lifecycles, user provisioning workflows, and privilege management controls.
• Design and deploy Zero Trust identity principles across network hubs.
• Configure and manage PKI systems, credentials, and authenticators.
• Implement MFA, SSO, and PAM across enterprise environments.
• Build federated identity services for secure interoperability with mission partners.
• Conduct root cause analysis, privilege audits, and performance tuning.
• Develop interfaces, architectures, data flows, and compliance documentation.
• Provide advanced engineering and architecture ownership for FI/CIAM with Azure AD B2C.

Job description

GovCIO is hiring a SME Systems Engineer specializing in Federation & Interoperability (FI) with a primary focus on Customer Identity and Access Management (CIAM) via Azure AD B2C for the U.S. Coast Guard (USCG).

Located in Alexandria, VA, this hybrid role designs and executes secure, identity-centric access controls across both legacy and modern enterprise architectures. The position emphasizes PKI, MFA, SSO, and Zero Trust principles per NIST SP 800-207, with enterprise-wide ICAM modernization