ICAM Engineer: Identity & Access Security (Zero Trust)

Booz Allen Hamilton; Illinois; Hybrid; USD 62,000 - 141,000; Full time

Job summary

Booz Allen Hamilton is seeking an ICAM Engineer to design, deploy, and support IAM systems across on-prem, cloud, and hybrid environments. You will evaluate identities, manage credentials, and implement SSO and MFA solutions to protect critical assets.

The role requires hands-on experience with Ping Federate, Entra ID, Okta, or ADFS, SAML 2.0/OIDC, RBAC/ABAC, and AD/LDAP integrations. A Secret clearance is preferred and HS diploma or GED is required.

Qualifications

• Experience with Ping Federate, Entra ID, Okta, or ADFS.
• Experience with SAML 2.0, OAuth 2.0, or OpenID Connect (OIDC).
• Experience with Identity Federation and Single Sign-On (SSO).
• Experience with access control models such as RBAC or ABAC.
• Experience integrating IdPs with directory services such as Active Directory (AD) and LDAP, including synchronization and authentication workflows.
• Knowledge of Zero Trust architectures and implementation of password-less authentication or multifactor authentication (MFA) within the IdP environment.
• Ability to resolve complex identity and federation issues, including token validation errors, assertion mismatches, and connectivity problems.
• Ability to design and operate IdP solutions across on-premises, hybrid, and cloud infrastructures, including AWS, Azure, or Google Cloud, and multiple Impact Levels.
• Secret clearance
• HS diploma or GED

Responsibilities

• Design, deploy, and operate IdP solutions across on-premises, hybrid, and cloud infrastructures.
• Analyze identity lifecycle, articulate access requirements and define enterprise identity records.
• Collaborate with stakeholders and engineering teams to implement enterprise-class IAM and Zero Trust controls.

Skills

Ping Federate

Entra ID

Okta

ADFS

SAML 2.0

OAuth 2.0

OIDC

Identity Federation

SSO

RBAC

ABAC

Active Directory

LDAP

MFA

Zero Trust

Password-less

Education

HS diploma or GED

Job description

Booz Allen Hamilton is seeking an ICAM Engineer to design, deploy, and support IAM systems across on-prem, cloud, and hybrid environments. You will evaluate identities, manage credentials, and implement SSO and MFA solutions to protect critical assets.

The role requires hands-on experience with Ping Federate, Entra ID, Okta, or ADFS, SAML 2.0/OIDC, RBAC/ABAC, and AD/LDAP integrations. A Secret clearance is preferred and HS diploma or GED is required.