ICAM Engineer — Cloud Identity & Zero Trust

Booz Allen Hamilton; Reston (VA); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton in Reston, VA is seeking an ICAM Engineer to design, deploy, secure, and operate OCI-based identity solutions within secure, regulated environments. You will work with government stakeholders and technical teams to implement IAM that supports Zero Trust and secure cloud onboarding.

The role focuses on integrating enterprise IAM platforms, federation, SSO/MFA, RBAC/ABAC, and strong identity lifecycle controls, with emphasis on security, risk management, and operational

Qualifications

• 8+ years of experience in identity and access management, cloud security engineering, or cybersecurity.
• Experience integrating commercial cloud environments with agency enterprise services and identity architectures.
• Experience designing, deploying, securing, and operating OCI solutions.
• Experience integrating applications and cloud services with enterprise IAM platforms such as GEOAxIS.
• Experience implementing federation, SSO, MFA, identity lifecycle management, RBAC, ABAC, and least-privilege access.
• Experience with SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, LDAP, Active Directory, token claims, attribute mapping, certificates, and metadata exchange.
• Experience applying Zero Trust principles and supporting secure identity designs, control implementation, testing, and operating procedures.
• Knowledge of RMF, ICD 503, and authorization processes.
• Active TS/SCI clearance; willingness to take a polygraph exam

Responsibilities

• Design, deploy, secure, and operate OCI solutions involving identity, audit logging, network security, secrets and key management, and privileged access.
• Integrate cloud applications and services with agency enterprise IAM platforms.
• Implement federation, SSO, MFA, identity lifecycle provisioning and deprovisioning, RBAC, ABAC, and least-privilege access models.
• Configure and troubleshoot SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, LDAP, and Active Directory integrations.
• Manage token claims, attribute mapping, certificates, metadata exchange, and authentication-flow troubleshooting.
• Apply Zero Trust principles and develop secure identity designs, control implementations, test evidence, and operating procedures.
• Support RMF, ICD 503, and A&A activities, including security-control implementation and assessment evidence.
• Coordinate solution architectures, resolve technical issues, and communicate identity, security, and operational risks to stakeholders.

Skills

Identity & Access Management

Cloud Security

Zero Trust

RMF/ICD 503

Stakeholder Communication

Problem Solving

Education

Bachelor's degree

Tools

Terraform

OCI Resource Manager

Ping Identity

Microsoft Entra ID

Okta

ADFS

GEOAxIS

Job description

Booz Allen Hamilton in Reston, VA is seeking an ICAM Engineer to design, deploy, secure, and operate OCI-based identity solutions within secure, regulated environments. You will work with government stakeholders and technical teams to implement IAM that supports Zero Trust and secure cloud onboarding.

The role focuses on integrating enterprise IAM platforms, federation, SSO/MFA, RBAC/ABAC, and strong identity lifecycle controls, with emphasis on security, risk management, and operational