ICAM Security Engineer – Identity & Access Automation

Via Logic LLC; Egg Harbor Township (NJ); Hybrid; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking an ICAM / Identity Engineer to advance the L-CAP platform within a SAFe/Agile environment for government programs. The role focuses on IAM, per-session authorization, and integration with government ICAM services using OAuth 2.0 and OpenID Connect. You will implement PKI, mTLS, and service mesh identity, enforce default-deny access, and contribute to audit logging and security automation.

A U.S. citizen with Public Trust eligibility is required.

Qualifications

• Bachelor's degree in cybersecurity, CS, IT or related field with 4+ years of relevant experience.
• Hands-on experience with OAuth 2.0 and OpenID Connect, including token validation and claims mapping.
• Experience with enterprise identity providers and federation (Keycloak, Okta, Ping, Entra ID).
• Experience implementing RBAC and ABAC within distributed applications.
• Knowledge of PKI, certificate lifecycle management, and mTLS/service mesh identity.
• Understanding of Zero Trust principles and per-session authorization.
• Experience with audit logging for access and authorization events.
• Proficiency in Java, Python, Go or similar languages.
• U.S. citizenship with ability to obtain Public Trust; FAA facility access requirements.

Responsibilities

• Integrate L-CAP with government ICAM services using OAuth 2.0 and OpenID Connect.
• Implement per-session authentication/authorization for user-to-service and service-to-service calls.
• Enforce default-deny access across distributed services and networks.
• Manage mutual TLS, service mesh identity, and certificate lifecycle routines.
• Design RBAC and ABAC aligned to operational/support roles.
• Ensure sign-in/sign-out and time-on-position logging for operational users.
• Produce ICAM control evidence and audit trails for compliance.
• Protect external endpoints via API gateway authorization and integration.

Skills

OAuth 2.0 & OpenID Connect

Identity federation

RBAC & ABAC

Kubernetes & container deployments

Java, Python, Go

Zero Trust

Audit logging

mTLS & service mesh identity

Public Trust eligibility

SAFe / Agile

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Keycloak

Okta

Ping Identity

Microsoft Entra ID

Job description

Leidos is seeking an ICAM / Identity Engineer to advance the L-CAP platform within a SAFe/Agile environment for government programs. The role focuses on IAM, per-session authorization, and integration with government ICAM services using OAuth 2.0 and OpenID Connect. You will implement PKI, mTLS, and service mesh identity, enforce default-deny access, and contribute to audit logging and security automation.

A U.S. citizen with Public Trust eligibility is required.