ICAM Automation Engineer - Zero Trust & IAM Orchestration

CACI International Inc.; O'Fallon (IL); On-site; USD 63,000 - 130,000; Full time

Benefits offered by this job

Flexible time off

Learning resources

Healthcare benefits

Job summary

CACI International Inc. seeks an ICAM Automation Engineer to design and automate IAM workflows, manage user lifecycles, MFA enrollment, and conditional access across Okta, CyberArk, AWS IAM Identity Center, and Active Directory.

You will build SOC automation, create Splunk ES rules and SOAR playbooks, and implement Zero Trust policies with Zscaler, AWS Verified Access, and device posture signals, collaborating across IAM, SOC, and engineering teams.

Qualifications

• Experience in IAM automation, security orchestration, or SOC operations.
• Familiar with Okta, CyberArk, and AWS IAM Identity Center workflows.
• Knowledge of Splunk ES and Splunk SOAR for ICAM/Zero Trust actions.
• Experience automating Zscaler ZPA/ZIA policies and device posture signals.

Responsibilities

• Develop and automate ICAM workflows including user lifecycle and MFA enrollment.
• Create and maintain integrations across Okta, CyberArk, AWS IAM Identity Center, and AD.
• Automate SOC/Zero Trust actions: session revocation, access removal, ticketing.
• Onboard, parse, and enrich log sources for IAM and security platforms.
• Design Zero Trust policies with Zscaler ZPA/ZIA and AWS Verified Access.

Skills

IAM automation

Security orchestration

SOC operations

Okta API integrations

CyberArk PAM automation

AWS IAM Identity Center

Active Directory

Splunk ES

Splunk SOAR

Python

PowerShell

SAML/OIDC

FIDO2

CAC/PIV

ABAC models

Education

DoD 8140 – Foundational Intermediate – 671 System Testing and Evaluation Specialist (tentative)

Certifications: CEH, CFR, Cloud+, GSEC, PenTest+, Security+, SSCP

Tools

Okta automation

CyberArk PAM automation

AWS IAM Identity Center

AD LDS

Job description

CACI International Inc. seeks an ICAM Automation Engineer to design and automate IAM workflows, manage user lifecycles, MFA enrollment, and conditional access across Okta, CyberArk, AWS IAM Identity Center, and Active Directory.

You will build SOC automation, create Splunk ES rules and SOAR playbooks, and implement Zero Trust policies with Zscaler, AWS Verified Access, and device posture signals, collaborating across IAM, SOC, and engineering teams.