ICAM Engineer: DoD IAM & Ping SME (Onsite Ft. Meade)

ECS; Fort Meade (MD); On-site; USD 170,000 - 190,000; Full time

Job summary

Everforth ECS seeks an ICAM Engineer to join our Ft. Meade, MD team in an onsite capacity.

You will serve as the Ping Identity SME, leading ICAM integrations and Credential Management across IL5/IL6 programs within DoD mission partner environments. You will design, implement, and optimize IAM solutions, maintain Active Directory and directory services, and contribute to policy-based access control while coordinating with stakeholders and engineering teams to deliver secure, scalable identity

Qualifications

• 10+ years of ICAM architectures experience.
• Active Secret clearance and U.S. citizenship.
• Onsite at Ft. Meade, MD five days/week.
• Experience with SAML/OIDC, LDAP, PKI across DoD environments.

Responsibilities

• Serve as ICAM SME for Azure-based DoD environments.
• Implement, maintain, and optimize enterprise systems.
• Monitor and manage all installed systems, infrastructure, and directory services.
• Configure, test, and maintain OS, application software, and management tools.
• Lead automation to improve operational efficiency.
• Support ICAM integration and enterprise directory developments.
• Prepare technical standards and guidance; document as-built and to-be architectures.

Skills

ICAM architectures

PingFederate & PingDirectory

PowerShell scripting

Active Directory

SAML/OIDC, OAuth/SCIM

Azure/Azure AD

DoD 8140 IAT II

Security & IAM

Stakeholder communication

Documentation

Education

Bachelor’s degree in Cybersecurity/CS

IAT II certification (e.g., Security+, CySA+, GSEC, SSCP)

Tools

PingFederate

PingDirectory

Azure AD

ADFS

Splunk

Job description

Everforth ECS seeks an ICAM Engineer to join our Ft. Meade, MD team in an onsite capacity.

You will serve as the Ping Identity SME, leading ICAM integrations and Credential Management across IL5/IL6 programs within DoD mission partner environments. You will design, implement, and optimize IAM solutions, maintain Active Directory and directory services, and contribute to policy-based access control while coordinating with stakeholders and engineering teams to deliver secure, scalable identity