ICAM Engineer - Secure Cloud Identity Architect

Phase2 Technology; Springfield (VA); On-site; USD 99,000 - 225,000; Full time

Benefits offered by this job

Health benefits

Life insurance

Disability coverage

Financial benefits

Retirement benefits

Paid leave

Professional development

Tuition assistance

Work-life programs

Dependent care

Recognition awards

Job summary

Booz Allen Hamilton seeks an experienced ICAM Engineer to integrate cloud environments with agency IAM architectures and secure, compliant OCI solutions. You will design, deploy, secure, and operate identity services across regulated environments, interfacing with stakeholders and security teams to enable trusted cloud onboarding.

The role emphasizes Zero Trust, identity lifecycle management, and secure operation of OCI-based IAM capabilities, with a TS/SCI clearance and willingness to obtain a

Qualifications

• 8+ years of experience in identity and access management, cloud security, or cybersecurity.
• Experience integrating commercial cloud environments with agency enterprise services and identity architectures.
• Experience designing, deploying, securing, and operating OCI solutions.
• Experience integrating applications with enterprise IAM platforms such as GEOAxIS.
• Experience implementing federation, SSO, MFA, identity lifecycle management, RBAC, ABAC, and least-privilege access.
• Experience with SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, LDAP, and Active Directory.
• Knowledge of RMF, ICD 503, and authorization processes.
• Active TS/SCI clearance; willingness to take a polygraph exam.

Responsibilities

• Design, deploy, secure, and operate OCI solutions involving identity, audit logging, network security, secrets and key management, and privileged access.
• Integrate cloud applications with agency IAM platforms such as GEOAxIS.
• Implement federation, SSO, MFA, and least-privilege access models.
• Configure and troubleshoot SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, LDAP, and Active Directory integrations.
• Manage token claims, attribute mapping, certificates, metadata exchange, and authentication-flow troubleshooting.
• Apply Zero Trust principles and develop secure identity designs and operating procedures.
• Support RMF, ICD 503, and NGA A&A activities, including security-control implementation and assessment evidence.
• Coordinate solution architectures and communicate identity, security, and operational risks to stakeholders.

Skills

Identity & IAM

Cloud security

Cybersecurity

Zero Trust

Education

Bachelor's degree

Tools

OCI

GEOAxIS

SAML 2.0

OIDC

OAuth 2.0

SCIM

LDAP

Active Directory

Terraform

OCI Resource Manager

Job description

Booz Allen Hamilton seeks an experienced ICAM Engineer to integrate cloud environments with agency IAM architectures and secure, compliant OCI solutions. You will design, deploy, secure, and operate identity services across regulated environments, interfacing with stakeholders and security teams to enable trusted cloud onboarding.

The role emphasizes Zero Trust, identity lifecycle management, and secure operation of OCI-based IAM capabilities, with a TS/SCI clearance and willingness to obtain a