ICAM Architect

Fantom Corporation; Chantilly (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Fantom Corporation is seeking an experienced ICAM Solutions Architect to lead a major ICAM modernization initiative in Chantilly, VA. The role focuses on transforming legacy identity and access capabilities into a cloud-ready, microservices-based architecture with DevSecOps practices.

You will define target enterprise architecture, guide modernization roadmaps, and provide oversight to ensure secure, scalable, and Zero Trust-aligned solutions across the enterprise, partnering with technical

Qualifications

• Active Top Secret clearance required.
• Willingness to obtain a polygraph upon hire.
• Experience as Solutions/ Enterprise/ Systems Architect on modernization initiatives.
• Strong design of distributed systems, microservices, and cloud-native apps.
• Experience with ICAM, identity services, or policy management.

Responsibilities

• Define and maintain enterprise ICAM architecture for modernization of PEP, PIP, EMS, and RPMS.
• Lead transition from legacy PDP to modern authorization frameworks.
• Design end-to-end architectures for identity services and policy management.
• Produce architecture artifacts: diagrams, data models, interfaces, and specs.
• Guide roadmaps, cloud migration strategies, and modernization decisions.
• Provide guidance to software, DevOps, and operations teams throughout the lifecycle.
• Perform architecture reviews, risk assessments, and compliance evaluations.
• Drive automation, observability, deployment pipelines, and scalability improvements.
• Evaluate emerging identity technologies and integration patterns.

Skills

Top Secret Clearance

Polygraph willingness

Team leadership

Communication skills

Agile development

Education

Bachelor's degree in Computer Science/Engineering/IT

Master's degree

Tools

Kubernetes

OpenShift

GitOps

Java

Python

Job description

Fantom Corporation is a mission-focused organization supporting critical programs across the defense and intelligence community. We partner with our customers to deliver high-impact technical solutions while fostering a culture built on trust, expertise, and long-term career growth.

We are seeking an experienced ICAM Solutions Architect to support a major Identity, Credential, and Access Management (ICAM) modernization initiative. This role will focus on transforming legacy Identity and Access Management capabilities into a modern, cloud-ready architecture using microservices, automation, and DevSecOps best practices.

As the technical architecture lead, you will define the target enterprise architecture, guide modernization efforts, and provide architectural oversight to ensure solutions are secure, scalable, interoperable, and aligned with Zero Trust (ZT) and enterprise ICAM strategies. You will collaborate closely with technical leadership, engineering teams, and program stakeholders to deliver mission-critical identity services supporting enterprise operations.

Responsibilities

• Define and maintain the enterprise ICAM architecture supporting the modernization of Policy Enforcement Points (PEP), Policy Information Points (PIP), Enterprise Management Services (EMS), and Resource & Policy Management Services (RPMS)
• Lead the transition from legacy Policy Decision Point (PDP) technologies to modern authorization frameworks
• Design end-to-end architectures supporting identity services, authorization workflows, policy management, attribute services, and resource lifecycle management
• Develop architecture artifacts including sequence diagrams, data models, interface specifications, and system design documentation
• Partner with Technical Leads and engineering teams to validate modernization roadmaps, architectural decisions, and cloud migration strategies
• Architect modern Policy Enforcement Point (PEP) and Policy Information Point (PIP) services supporting Attribute-Based Access Control (ABAC), dynamic policy evaluation, and event-driven authorization
• Design enterprise authorization services, policy lifecycle automation, resource registration, and attribute orchestration capabilities
• Provide technical guidance to software engineering, DevOps, and operations teams throughout the development lifecycle
• Conduct architecture reviews, technical risk assessments, and compliance evaluations to ensure modernization objectives are achieved
• Drive improvements in automation, observability, deployment pipelines, scalability, resilience, and operational efficiency
• Evaluate emerging identity technologies, authentication methods, authorization frameworks, and integration patterns to improve enterprise ICAM capabilities
• Serve as a trusted technical advisor to program leadership, supporting strategic planning, budgeting, customer engagements, and long-term modernization initiatives

Required Qualifications

• Must posses an active Top Secret Security Clearance
• Must be willing to obtain a polygraph upon hire
• Bachelor's degree in Computer Science, Engineering, Information Technology, or another STEM discipline with 12+ years of relevant experience, or a Master's degree with 10+ years of relevant experience
• Experience serving as a Solutions Architect, Enterprise Architect, or Systems Architect supporting enterprise modernization initiatives
• Strong experience designing distributed systems, microservices architectures, and cloud-native applications
• Experience supporting Identity, Credential, and Access Management (ICAM), enterprise identity services, or authorization and policy management platforms
• Experience defining enterprise architecture strategies, modernization roadmaps, and technical implementation plans
• Strong understanding of Zero Trust architecture principles and enterprise security frameworks
• Experience translating mission requirements into scalable technical architectures and engineering solutions
• Experience working within Agile development environments, including Program Increment (PI) Planning and iterative software delivery
• Excellent communication, leadership, and stakeholder engagement skills
• Ability to obtain CompTIA Security+ certification within 90 days of hire

Desired Qualifications

• Experience with Kubernetes, OpenShift, or other container orchestration platforms
• Experience developing or integrating applications using Java and/or Python
• Experience with GitOps methodologies and modern DevSecOps practices
• Enterprise Architecture certifications such as TOGAF, Zachman, or equivalent
• Expertise with enterprise identity and authorization standards including X.509, SAML, OAuth2, OpenID Connect (OIDC), and LDAP
• Experience architecting enterprise ICAM solutions using Oracle Identity Management or similar enterprise identity platforms
• Experience designing Attribute-Based Access Control (ABAC), Role-Based Access Control (RBAC), Policy-as-Code, and Zero Trust access models
• Experience supporting Department of Defense or Intelligence Community identity and authorization systems

Fantom Corp is a Software Development, Agile Cloud, Software Development, Cyber Security (Risk Management, Assessments & Authorization (A&A)), Data, AI Platform (Computer Vision Models), Podcasting Media Services, and IT Services provider. Established in 2015, Fantom Corp serves Federal customers with top-notch Cybersecurity Architects, Data Scientists/Analysts, Software Engineers/Developers, DevSecOps Engineers, Project Managers, Identity, Credential Access Management (ICAM) services , and Cloud-certified practitioners. We excel in delivering emerging technologies such as Artificial Intelligence (AI) and Machine Learning (ML) with a focus on identifying trends, object detection, and classification of structured and unstructured data. Fantom Corp possesses mastery in all aspects of digital audio production. We lead in the ideation and creation of efforts for clients who want to harness the power of podcasting. We guide them in selecting the right show format for their needs and goals. As a Small Business, we possess the innovation, speed and flexibility to meet your requirements.