ICAM Security Engineer - Identity & Access Lead (Hybrid)

Leidos; United States; Hybrid; USD 140,000 - 170,000; Full time

Job summary

Leidos is seeking an ICAM / Identity Engineer to support the L-CAP platform within the Air Traffic Business Area. The role combines identity, access management, and security controls across a hybrid cloud environment for government programs.

You will implement and operate ICAM services, federation, RBAC/ABAC, and audit logging while coordinating with government ICAM services and enterprise identity providers. A Public Trust is required.

Qualifications

• Bachelor's degree or equivalent with 4+ years of relevant experience.
• Hands-on experience with OAuth 2.0 and OpenID Connect including token validation and claims mapping.
• Experience with enterprise identity providers and federation (Keycloak, Okta, Ping, Entra ID).
• Experience implementing RBAC and/or ABAC in distributed apps.
• Knowledge of PKI, certificate lifecycle, mTLS and service mesh identity.
• Understanding of Zero Trust, per-session authorization, and default-deny principles.
• Experience with audit logging for access and authorization events.
• Proficiency in Java, Python, Go, or similar languages.
• Kubernetes and containerized deployments experience.
• U.S. citizenship and ability to obtain Public Trust and satisfy FAA residency requirements.

Responsibilities

• Integrate L-CAP services with government ICAM services using OAuth 2.0 and OpenID Connect.
• Implement identity federation and user stores (Keycloak or equivalent).
• Enforce per-session authentication and authorization for user-to-service and service-to-service requests.
• Implement mTLS, service mesh identity, and certificate lifecycle management.
• Design and implement role-based and attribute-based access controls.
• Implement authentication and session management for operational users and event logging.
• Provide ICAM control evidence and collaborate on AI-assisted development to improve delivery.
• Ensure API gateway authorization and protection of external endpoints.

Skills

OAuth 2.0

OpenID Connect

RBAC/ABAC

mTLS

PKI

Zero Trust

Audit logging

Java

Python

Go

Kubernetes

Service mesh

APIs & Gateway security

Cloud architecture

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

Keycloak

Okta

Ping

Microsoft Entra ID

Istio / Linkerd

Job description

Leidos is seeking an ICAM / Identity Engineer to support the L-CAP platform within the Air Traffic Business Area. The role combines identity, access management, and security controls across a hybrid cloud environment for government programs.

You will implement and operate ICAM services, federation, RBAC/ABAC, and audit logging while coordinating with government ICAM services and enterprise identity providers. A Public Trust is required.