ICAM Automation Engineer — Zero Trust & IAM

CACI International; United States; Remote; USD 63,000 - 130,000; Full time

Job summary

CACI International is seeking an ICAM Automation Engineer to design and scale secure automation across IAM, SOC, and cloud environments for Zero Trust. You will automate user lifecycles, MFA enrollment, and conditional access while building integrations with Okta, CyberArk, and AWS IAM Identity Center.

The role supports Cyber 2 operations and requires an interim secret clearance, offering a challenging role at the intersection of engineering and enterprise security.

Qualifications

• Interim Secret clearance (minimum).
• DoD 8140 – Foundational Intermediate – 671 System Testing and Evaluation Specialist (tentative).
• One or more certifications: CEH, CFR, Cloud+, GSEC, PenTest+, Security+, SSCP.
• 4+ years in IAM automation, security orchestration, or SOC operations.
• Experience with Okta, CyberArk PAM, AWS IAM Identity Center, and AD environments.
• Experience with Splunk ES and Splunk SOAR for ICAM/Zero Trust actions.

Responsibilities

• Develop and automate ICAM workflows including user lifecycle management and MFA enrollment.
• Build and maintain integrations across Okta, CyberArk, AWS IAM Identity Center, and Active Directory.
• Create and enhance SOC/Zero Trust automation including Splunk ES rules and SOAR playbooks.
• Automate actions such as session revocation, access removal, and incident ticketing.
• Support log source onboarding, parsing, and enrichment for IAM and security platforms.
• Design Zero Trust policies involving Zscaler ZPA/ZIA, AWS Verified Access, and device trust signals.
• Collaborate across engineering, SOC, and identity teams to strengthen automation and security outcomes.

Skills

IAM automation

SOC automation

Automation engineering

Security operations

Okta automation

CyberArk PAM automation

AWS IAM Identity Center

Splunk ES

Splunk SOAR

Zscaler ZPA/ZIA

Tools

Okta

CyberArk

AWS IAM Identity Center

Active Directory

Splunk ES

Splunk SOAR

Zscaler ZPA/ZIA

AD LDS

Job description

CACI International is seeking an ICAM Automation Engineer to design and scale secure automation across IAM, SOC, and cloud environments for Zero Trust. You will automate user lifecycles, MFA enrollment, and conditional access while building integrations with Okta, CyberArk, and AWS IAM Identity Center.

The role supports Cyber 2 operations and requires an interim secret clearance, offering a challenging role at the intersection of engineering and enterprise security.