ICAM Engineer - IAM & SSO (Remote)

Booz Allen Hamilton

United States

On-site

USD 62,000 - 141,000

Full time

14 days+

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Booz Allen Hamilton seeks an ICAM Engineer to advance identity and access management and Zero Trust initiatives. The role focuses on designing and deploying IdP solutions, integrating with AD/LDAP, and ensuring secure access across on-prem, hybrid, and cloud infra.

You will work with Ping Federate, Entra ID, and Okta to enable SSO and MFA. Applicants should have experience with SAML/OIDC, RBAC/ABAC, and Bellwether cloud IAM services, with a Secret clearance and HS diploma or GED.

Qualifications

Experience with Ping Federate, Entra ID, Okta, or ADFS.
Experience with SAML 2.0, OAuth 2.0, or OpenID Connect (OIDC).
Experience with Identity Federation and Single Sign-On (SSO).
Experience with access control models such as RBAC or ABAC.
Experience integrating IdPs with directory services such as Active Directory (AD) and LDAP, including synchronization and authentication workflows.
Knowledge of Zero Trust architectures and implementation of password-less authentication or multifactor authentication (MFA) within the IdP environment.
Ability to resolve complex identity and federation issues, including token validation errors, assertion mismatches, and connectivity problems.
Ability to design and operate IdP solutions across on-premises, hybrid, and cloud infrastructures, including AWS, Azure, or Google Cloud, and multiple Impact Levels.
Secret clearance
HS diploma or GED

Responsibilities

As a Ping Identity Engineer, collaborate with stakeholders and engineering teams to analyze critical processes and user roles.
Design, deploy, and support IdP solutions to verify appropriate user privileges and manage credentials across environments.
Implement enterprise-class IAM solutions from single sign-on to privileged access systems.