ICAM Security Engineer - AI-Driven IAM & Zero Trust

Leidos Inc; Eagan (MN); Hybrid; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking an ICAM / Identity Engineer to join the Air Traffic Business Area within the Homeland Sector, supporting the integration of OAuth2/OpenID Connect, Keycloak, and RBAC/ABAC across the L-CAP platform.

This hybrid role requires 3 days onsite and 2 days remote for commutable distances from Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ, with remote consideration if not within reach; U.S. citizenship and Public Trust eligibility are required.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT or related field with 4+ years of experience.
• Hands-on with OAuth2.0 and OpenID Connect including token validation and claims mapping.
• Experience with enterprise identity providers and federation (Keycloak, Okta, Ping, Entra ID).
• Experience implementing RBAC and/or ABAC in distributed apps.
• Knowledge of PKI, mTLS, and service mesh identity.
• Understanding of Zero Trust and per-session authorization.
• Experience with audit logging for access and authorization events.
• Proficiency in Java, Python, or Go; Kubernetes knowledge.
• U.S. citizenship required with ability to obtain Public Trust.

Responsibilities

• Integrate L-CAP with government ICAM services using OAuth 2.0 and OIDC.
• Implement identity federation and user stores (Keycloak or equivalent).
• Enforce per-session authentication and authorization across services.
• Implement mTLS, service mesh identity, and certificate lifecycle management.
• Design RBAC and ABAC aligned to roles in operations and support.
• Manage sign-in/out and time-on-position logging for operational users.
• Provide ICAM control evidence and audit logs across distributed services.
• Protect external endpoints with API gateway authorization and IAM policies.
• Leverage AI-assisted development to improve quality and delivery.

Skills

OAuth 2.0 / OpenID Connect

Keycloak

RBAC / ABAC

PKI / mutual TLS

Zero Trust

Audit logging

Java / Python / Go

Kubernetes

SAFe / Agile

Education

Bachelor's degree in Cybersecurity / CS / IT

Tools

Keycloak

Okta / Ping / Entra ID

Kubernetes

Job description

Leidos is seeking an ICAM / Identity Engineer to join the Air Traffic Business Area within the Homeland Sector, supporting the integration of OAuth2/OpenID Connect, Keycloak, and RBAC/ABAC across the L-CAP platform.

This hybrid role requires 3 days onsite and 2 days remote for commutable distances from Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ, with remote consideration if not within reach; U.S. citizenship and Public Trust eligibility are required.