IAM/ICAM Engineer — Zero-Trust Security Specialist

Booz Allen Hamilton; Colorado Springs (CO); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking an ICAM Engineer to support large-scale identity and access management initiatives for government clients. You will analyze identity lifecycles, define access requirements, and implement secure IAM solutions from SSO to privileged access systems to protect critical assets.

The role emphasizes designing, deploying, and supporting IAM solutions with a focus on zero-trust principles, PKI and PIV standards, and cloud IAM in Azure/AWS.

Qualifications

• 3+ years of ICAM/security operations/identity governance experience
• 3+ years administering directory services such as Active Directory or LDAP
• 3+ years cybersecurity administration including identity lifecycle management
• Experience with MFA solutions and Privileged Access Management (CyberArk or Delinea)
• Experience supporting IAM solutions in cloud environments such as Azure or AWS
• Knowledge of PKI and PIV standards and identity security best practices
• Knowledge of identity-focused cybersecurity principles and controls
• Top Secret clearance required

Responsibilities

• Analyze the identity lifecycle and articulate access requirements
• Define enterprise identity records and governance models
• Design, deploy, and support IAM systems including single sign-on and privileged access
• Implement enterprise-class IAM solutions and help stop adversaries
• Support large-scale IAM projects for government clients

Skills

ICAM experience

Security operations

Identity governance

MFA solutions

Privileged Access Management

Azure

AWS

PKI and PIV

Top Secret clearance

Education

HS diploma or GED

Tools

Microsoft Identity Manager

SailPoint

Saviynt

One Identity

Splunk

ELK stack

Job description

Booz Allen Hamilton is seeking an ICAM Engineer to support large-scale identity and access management initiatives for government clients. You will analyze identity lifecycles, define access requirements, and implement secure IAM solutions from SSO to privileged access systems to protect critical assets.

The role emphasizes designing, deploying, and supporting IAM solutions with a focus on zero-trust principles, PKI and PIV standards, and cloud IAM in Azure/AWS.