Identity & Access Management (ICAM) Architect (TS/SCI Clearance Required)

North Point Technology; Chantilly (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

North Point Technology is seeking an ICAM Architect (TS/SCI) in Chantilly, VA to lead modernization of ICAM capabilities, including PEP/PIP, EMS, and RPMS, with a focus on Zero Trust alignment and cloud-ready transitions.

The role requires an active TS clearance with SCI eligibility; six-month assignment; and collaboration with engineering teams to map legacy systems to modern microservices architectures.

Qualifications

• Experience as a solutions architect or enterprise architect on complex modernization/security ICAM programs.
• Experience designing distributed systems and cloud-native solutions.
• Background in ICAM modernization, identity, authorization, and policy services.

Responsibilities

• Provide architectural leadership across PEP/PIP, EMS, and RPMS modernization.
• Translate mission needs into technical requirements, diagrams, and interface specs.
• Define end-to-end architectural patterns for identity, attribute services, and policy distribution.
• Guide DevOps/software teams on scalability, resilience, and security; conduct reviews and risk assessments.

Skills

Solutions architect

Distributed systems design

ICAM modernization

Agile methodologies

Education

BA/BS in a related field

TOGAF certification

Tools

Kubernetes

OpenShift

GitOps

Java

Job description

Identity & Access Management (ICAM) Architect (TS/SCI Clearance Required)

Chantilly, Virginia, United States

North Point Technology is looking to hire an ICAM Architect to support the GEOAxIS modernization effort. The qualified candidate must have an active Top Secret (TS) security clearance and be eligible for SCI access, and will provide the technical architectural oversight that keeps the modernization of legacy ICAM capabilities – Policy Enforcement Points, Policy Information Points, Enterprise Management Services, and Resource and Policy Management Services – strategically aligned, secure, and extensible. The ideal candidate has deep experience defining target architectures, guiding engineering teams, and mapping legacy-to-modern transitions across on‑prem and cloud‑ready environments.

This program requires employees to have an active TS clearance with eligibility to obtain SCI and CI Poly.

If you have a Full Scope Poly, working this program will keep your Full Scope ACTIVE.

Responsibilities

This position provides architectural leadership across the PEP/PIP, EMS, and RPMS modernization, ensuring alignment with NGA's Zero Trust and ICAM strategic framework and guiding the transition from the legacy PDP to JBlocks. Duties include developing end-to-end architectural patterns for identity, attribute services, authorization flows, and policy distribution; partnering with the Technical Lead to validate modernization roadmaps and integration strategies for microservices‑based components; translating mission needs into technical requirements, sequence diagrams, data models, and interface specifications; designing modern PEP/PIP interfaces that support attribute‑based access control and dynamic policy evaluation; architecting EMS and RPMS capabilities such as resource registration and policy lifecycle automation; providing guidance to DevOps and software teams on scalability, resilience, and security; conducting architectural reviews, risk assessments, and compliance verification; and serving as a senior technical advisor to program management.

This is a short-term assignment with an expected duration of six months.

Required Skills/Experience

• Experience as a solutions architect, systems architect, or enterprise architect on complex modernization, security, or ICAM programs
• Experience designing distributed systems, microservices architectures, and cloud-native solutions
• Experience leading or supporting teams engaged in ICAM modernization, enterprise identity, or authorization and policy services
• Experience with Agile methodologies, Program Increment (PI) planning, and architectural runway development

Preferred Skills/Experience

• Experience with Kubernetes, OpenShift, or container orchestration platforms
• Experience with Java and/or Python for modern development and integration
• Knowledge of GitOps tools for managing modern environments
• Expertise with identity and authorization standards (X.509, SAML, OAuth2, OIDC, LDAP)
• Experience architecting ICAM solutions on Oracle or other enterprise-grade identity platforms
• Experience defining ABAC/RBAC models, policy-as-code, and Zero Trust-aligned access patterns
• Prior experience supporting NGA or Intelligence Community identity and authorization systems
• Certification in an enterprise architecture framework (e.g., TOGAF)

Qualifications

• Active Top Secret security clearance; SCI eligibility required
• Ability to obtain a CI polygraph after hire
• Ability to obtain a DoD 8570-compliant certification (e.g., Security+) within 90 days of hire

For positions requiring a federal security clearance, your clearance level must be clearly identified on your resume.