ICAM Security Engineer — Hybrid/Remote Identity

Leidos; Egg Harbor Township (NJ); Hybrid; USD 87,000 - 157,000; Full time

Job summary

Leidos is hiring an ICAM/Identity Engineer for the Air Traffic Business Area, shaping the L-CAP platform. You will integrate ICAM services, enforce per-session authorization, and build audit foundations across distributed services in a SAFe/Agile program. Hybrid work arrangement with potential remote options.

The role requires US citizenship and ability to obtain a Public Trust; FAA facility access and a long residency history may be needed.

Qualifications

• Bachelor's degree in cybersecurity, computer science, information technology or related field.
• 4+ years of relevant experience; additional education may substitute for degree.

Responsibilities

• Integrate L-CAP with government ICAM services using OAuth 2.0 and OpenID Connect.
• Implement identity federation and user stores (Keycloak or equivalent).
• Enforce per-session authentication/authorization and default-deny policy.
• Implement mTLS, service mesh identity, and certificate lifecycle management.
• Design RBAC and ABAC to support operational and support roles.
• Manage sign-in/sign-out and time-on-position logging for operational users.
• Audit logging of access/authorization events and ICAM control evidence.
• Protect external endpoints via API gateway authorization and API management.
• Leverage AI-assisted development to improve quality and delivery.

Job description

Leidos is hiring an ICAM/Identity Engineer for the Air Traffic Business Area, shaping the L-CAP platform. You will integrate ICAM services, enforce per-session authorization, and build audit foundations across distributed services in a SAFe/Agile program. Hybrid work arrangement with potential remote options.

The role requires US citizenship and ability to obtain a Public Trust; FAA facility access and a long residency history may be needed.