ICAM Engineer – Identity, Credential, and Access Management

RMantra Solutions; Alexandria, Northern (VA, KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

RMantra Solutions is seeking an ICAM Engineer to deploy, secure, and maintain ForgeRock ICAM platforms in a 100% onsite role in Arlington, VA. The engineer will integrate LDAP/Active Directory with ICAM, implement federation via SAML/OAuth2, and manage the complete identity lifecycle.

The role requires TS clearance with SCI eligibility, DoD experience, and strong Linux/Windows administration and scripting. Expect collaboration across security, operations, and engineering teams.

Qualifications

• BS in Computer Science, IT, or related discipline and 8+ years of systems engineering experience (or equivalent).
• Active TS clearance with SCI eligibility.
• Ability to obtain and maintain a CI Poly and Special Program Access.
• IAT Level II certification or higher (e.g., Security+ CE, CySA+, SSCP, CISSP).
• Hands on experience with federation technologies (SAML, OAuth2) and ZeroTrust identity principles.
• Experience engineering or administering the ForgeRock platform (AM, IDM, DS).
• Strong understanding of ICAM concepts, identity lifecycle management, and enterprise access controls.
• Experience with Windows and Linux systems administration, shell scripting, and troubleshooting.

Responsibilities

• Engineer, deploy, secure, and maintain ForgeRock ICAM platforms across Linux environments to meet DoD, DISA, and federal standards.
• Integrate enterprise applications and directories (LDAP, Active Directory) with ICAM platforms using federation protocols (SAML, OAuth2) across cross-domain workflows.
• Manage the complete identity and credential lifecycle (issuing, renewing, revoking, automation) to enforce strict Zero Trust controls.
• Conduct system hardening, log analysis, and vulnerability management to support RMF compliance and risk reviews.
• Diagnose and resolve ICAM/ForgeRock issues within SLAs, perform root-cause analysis and performance tuning.
• Create and version-control engineering artifacts (CONOPS, SOPs, API docs, workflow diagrams) and maintain ICAM metrics dashboards.

Skills

ForgeRock ICAM

SAML

OAuth2

Zero Trust

Linux

Windows

Shell scripting

IAM

Education

BS in Computer Science/IT or related

Tools

ForgeRock AM/IDM/DS

LDAP

Active Directory

GitLab

Jenkins

Job description

ICAM Engineer Identity, Credential, and Access Management

This position is 100% Onsite. This position is in Arlington, VA, with occasional/situational travel.

Certificate

N/A

Schedule

100% onsite

Clearance

US Citizens withDOD Top Secret

• Engineering & Deployment:Engineer, deploy, secure, and maintaincomplex, mission-critical identity systems specificallyForgeRock IdP/ICAM platforms across Linux-based environments to meet DoD, DISA, and federal standards.


• Integration & Federation:Integrate enterprise applications and directories(LDAP, Active Directory) with ICAM platforms using robust federation protocols (SAML, OAuth2, APIs) across cross-domain workflows and secure enclaves.


• Lifecycle & Access Control:Managethe completeidentity and credentiallifecycle(issuing, renewing, revoking, and automating workflows) to enforce strict Zero Trust access controls.


• Security & Compliance:Conductsystem hardening, log analysis, andvulnerability management to support compliance with the Risk Management Framework (RMF) and participate in architectural and risk reviews.


• Operations & Troubleshooting:Diagnose and resolveescalated ICAM and ForgeRock issues within defined SLAs, conductingroot cause analysis, performance tuning, and active monitoring.


• Documentation & Metrics:Create and version-control keyengineering artifacts(CONOPS, SOPs, API documentation, and workflow diagrams) while maintaining ICAM performance metrics and dashboards.

Basic Qualifications

• BS in Computer Science, IT, or related discipline and 8+ years of systems engineering experience (or equivalent experience in lieu of degree).


• Active TS clearance with SCI eligibility


• Ability to obtain and maintain a CI Poly and Special Program Access.


• IAT Level II certification or higher (e.g., Security+ CE, CySA+, SSCP, CISSP).


• Hands on experience with federation technologies (SAML, OAuth2) and ZeroTrust identity principles.


• Experience engineering or administering the ForgeRock platform (AM, IDM, DS).


• Strong understanding of ICAM concepts, identity lifecycle management, and enterprise access controls.


• Experience with Windows and Linux systems administration, shell scripting, and troubleshooting.

Preferred Qualifications

• Experience supporting DISA or DoD mission partners.


• Active TS/SCI with CI Poly preferred.


• Experience with any of the following:
  
  JISG Access Controls
  
  AWS cloud engineering, IAM, and security services
  
  Ansible playbooks and automated configuration management
  
  CI/CD pipelines (GitLab, Jenkins, etc.)

Join a dynamic team where your ideas matter and your career thrives.