ICAM Automation Engineer — Zero Trust IAM (Secret Clearance)

CACI; United States; On-site; USD 63,000 - 130,000; Full time

Job summary

CACI is seeking an ICAM Automation Engineer to join a mission-driven cybersecurity team focused on Zero Trust and modern IAM automation. You will design and implement secure, scalable ICAM workflows across Okta, CyberArk, AWS IAM Identity Center, and AD, while building SOC automation and SIEM/SOAR capabilities.

The role requires interim Secret clearance and 4+ years in IAM automation or SOC operations, with strong experience in supporting cross-functional security teams in a fast-paced

Qualifications

• Active DoD security clearance (Secret or higher).
• 4+ years in IAM automation or SOC operations.
• Experience with CI/CD for security workflows.
• Certifications: CEH, CFR, Cloud+, GSEC, PenTest+, Security+, SSCP.

Responsibilities

• Develop and automate ICAM workflows, including user lifecycle management, MFA enrollment.
• Build and maintain integrations across Okta, CyberArk, AWS IAM Identity Center, and Active Directory environments.
• Create and enhance SOC and Zero Trust automation, including Splunk ES detection rules and Splunk SOAR playbooks.
• Automate security actions such as session revocation, access removal, credential rotation, and incident ticket generation.
• Support log source onboarding, parsing, and enrichment for IAM and security platforms.
• Design and implement Zero Trust policies involving Zscaler ZPA/ZIA, AWS Verified Access, and device trust signals.
• Collaborate across engineering, SOC, and identity teams to strengthen automation, consistency, and security outcomes

Skills

Okta automation

CyberArk PAM automation

AWS IAM Identity Center

Splunk ES

Splunk SOAR

Zero Trust

Python

Education

DoD 8140 Foundations Intermediate 671 Specialist

Tools

AD LDS

Active Directory

Zscaler ZPA/ZIA

AWS Verified Access

Job description

CACI is seeking an ICAM Automation Engineer to join a mission-driven cybersecurity team focused on Zero Trust and modern IAM automation. You will design and implement secure, scalable ICAM workflows across Okta, CyberArk, AWS IAM Identity Center, and AD, while building SOC automation and SIEM/SOAR capabilities.

The role requires interim Secret clearance and 4+ years in IAM automation or SOC operations, with strong experience in supporting cross-functional security teams in a fast-paced