ICAM Engineer - Zero-Trust Cloud Identity & OCI

Booz Allen Hamilton; Springfield (VA); On-site; USD 87,000 - 198,000; Full time

Benefits offered by this job

Health

Life insurance

Disability benefits

Financial planning

Retirement benefits

Paid leave

Professional development

Tuition assistance

Work-life programs

Dependent care

Recognition awards program

Job summary

Booz Allen Hamilton is seeking an ICAM Engineer to design, deploy, secure, and operate OCI solutions within secure, regulated environments. You’ll integrate enterprise IAM platforms, implement SSO/MFA and RBAC/ABAC, and coordinate with stakeholders to manage identity risks.

Applicants should hold a TS/SCI clearance and a bachelor’s degree, with extensive IAM and cloud security experience. The role emphasizes secure identity design, RMF alignment, and collaboration with cross-functional teams.

Qualifications

• 8+ years of experience in identity and access management, cloud security engineering, or cybersecurity.
• Experience integrating commercial cloud environments with agency-specific enterprise services and identity architectures.
• Experience designing, deploying, securing, and operating OCI solutions.
• Experience integrating applications and cloud services with enterprise IAM platforms such as GEOAxIS.
• Experience implementing federation, SSO, MFA, identity lifecycle management, RBAC, ABAC, and least-privilege access.
• Experience with SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, LDAP, Active Directory, token claims, attribute mapping, certificates, and metadata exchange.
• Experience applying Zero Trust principles and supporting secure identity designs, control implementation, testing, and operating procedures.
• Knowledge of RMF, ICD 503, and authorization processes.
• Active TS/SCI clearance; willingness to take a polygraph exam.
• Bachelor’s degree

Responsibilities

• Design, deploy, secure, and operate OCI solutions.
• Integrate cloud apps with agency IAM platforms.
• Implement federation, SSO, MFA, and least-privilege access models.
• Configure SAML 2.0, OIDC, OAuth, SCIM, LDAP, and AD integrations.
• Manage token claims, certificates, and metadata exchange.
• Apply Zero Trust principles and develop secure identity designs and procedures.
• Coordinate architectures and communicate security and operational risks to stakeholders.

Skills

Identity & Access Management

Cloud integration

OCI solutions

IAM integration GEOAxIS

Federation & SSO

MFA

RBAC & ABAC

SAML 2.0 / OIDC / OAuth 2.0

SCIM / LDAP / Active Directory

Zero Trust

RMF & ICD 503

TS/SCI clearance

Education

Bachelor’s degree

Tools

Terraform

OCI Resource Manager

Ping Identity

Okta

Microsoft Entra ID

ADFS

Job description

Booz Allen Hamilton is seeking an ICAM Engineer to design, deploy, secure, and operate OCI solutions within secure, regulated environments. You’ll integrate enterprise IAM platforms, implement SSO/MFA and RBAC/ABAC, and coordinate with stakeholders to manage identity risks.

Applicants should hold a TS/SCI clearance and a bachelor’s degree, with extensive IAM and cloud security experience. The role emphasizes secure identity design, RMF alignment, and collaboration with cross-functional teams.