ICAM Architect — IAM & Zero Trust Expert

Phase2 Technology; McLean (VA); On-site; USD 86,800 - 198,000; Full time

Job summary

Booz Allen seeks an ICAM Architect to deliver identity and access management solutions for clients, focusing on zero trust, SSO, and MFA. You will interface with stakeholders and engineering teams to analyze identities, define enterprise identity records, and design, deploy, and support systems that verify privileges.

Candidates should have hands-on experience with Okta/Entra ID, SAML/OIDC, AD/LDAP, and modern IAM tooling, with a focus on secure, scalable, enterprise-grade deployments in a U.S.

Qualifications

• Experience with Okta or Entra ID and certificate-based authentication.
• Experience with SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Experience developing custom SAML, OAuth, and OIDC integrations and troubleshooting protocol exchanges.
• Experience with languages used for identity platform development and automation such as Java, JavaScript, Python, PowerShell, or Groovy.
• Experience working with RESTful APIs to integrate identity providers with external applications and automate identity lifecycle processes.
• Experience integrating and synchronizing with Active Directory (AD) or LDAP and AD Management.
• Knowledge of Zero Trust architectures and implementation of password‑less authentication or multifactor authentication (MFA) within the IdP environment.
• Ability to resolve complex identity and federation issues, including token validation errors, assertion mismatches, and connectivity problems.

Responsibilities

• Analyze the identity lifecycle and articulate access requirements.
• Design, deploy, and support IAM systems for enterprise assets.
• Implement enterprise-class identity solutions across customers.
• Collaborate with stakeholders and engineering teams to define roles and processes.

Skills

Okta or Entra ID

Certificate-based authentication

SAML 2.0

OAuth 2.0

OIDC

custom SAML/OIDC integrations

Java

JavaScript

Python

PowerShell

Groovy

RESTful APIs

Active Directory/LDAP

Zero Trust

MFA

token validation troubleshooting

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology

HS diploma or GED

Tools

Okta

Entra ID

Entra ID Connect

Workday integrations

Saviynt

Sailpoint

Omada

Oracle IAM

SCIM

Okta Workflows

Inline Hooks

Okta APIs

AWS Cognito

Azure AD B2C

KeyCloak

Google Cloud Identity

Job description

Booz Allen seeks an ICAM Architect to deliver identity and access management solutions for clients, focusing on zero trust, SSO, and MFA. You will interface with stakeholders and engineering teams to analyze identities, define enterprise identity records, and design, deploy, and support systems that verify privileges.

Candidates should have hands-on experience with Okta/Entra ID, SAML/OIDC, AD/LDAP, and modern IAM tooling, with a focus on secure, scalable, enterprise-grade deployments in a U.S.