Identity & Access Management (ICAM) Engineer (TS/SCI Clearance Required)

North Point Technology; Chantilly (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

North Point Technology in Chantilly, VA seeks a Senior ICAM Engineer to implement modernized identity and access solutions. The role focuses on designing, developing, integrating, testing, and troubleshooting ICAM capabilities across secure environments, with a hands-on, multi-workstream orientation.

Candidates must hold an active TS clearance with SCI eligibility; CI poly and 8570-style certs are a plus. You will collaborate with architects and DevOps to enable secure microservices,

Qualifications

• Hands-on experience with identity, authentication, authorization, or enterprise security.
• Experience building distributed systems or microservices on modern platforms.
• Experience supporting Agile teams and iterative delivery of new capabilities.

Responsibilities

• Implement ICAM modernization designs for ICAM components and transition from legacy systems; develop and integrate microservices for identity, attributes, authorization, and policy distribution.
• Collaborate with Architect to translate designs into engineering tasks and interfaces; support PI planning, backlog refinement, estimation, and risk identification.
• Enhance EMS and RPMS with automation for resource and role lifecycle management; work with DevOps on CI/CD, containerization, and deployment to Kubernetes/OpenShift.

Skills

Identity & access management

Distributed systems

Agile methodologies

Tools

Kubernetes/OpenShift

Java

Python

GitOps

AWS

Linux

OAuth2/OIDC

Job description

Identity & Access Management (ICAM) Engineer (TS/SCI Clearance Required)

Chantilly, Virginia, United States

North Point Technology is looking to hire a Senior ICAM Engineer to support the GEOAxIS modernization effort. The qualified candidate must have an active Top Secret (TS) security clearance and be eligible for SCI access, and will implement the Architect's designs and the Technical Lead's engineering direction to design, develop, integrate, test, and troubleshoot modernized ICAM capabilities. The ideal candidate is a strong hands‑on contributor across multiple modernization workstreams with deep experience building secure, microservices‑based identity and access solutions.

This program requires employees to have an active TS clearance with eligibility to obtain SCI and CI Poly.

If you have a Full Scope Poly, working this program will keep your Full Scope ACTIVE.

Responsibilities

This position implements ICAM modernization designs for PEP/PIP, EMS, and RPMS components, aligning with established architectural patterns and guiding the transition from the legacy PDP to JBlocks. Duties include developing and integrating microservices that support identity, attributes, authorization, resource registration, and policy distribution; working with the Architect to translate high‑level designs into detailed engineering tasks and system interfaces; supporting the Technical Lead during Program Increment (PI) planning, backlog refinement, estimation, and risk identification; building new PEP/PIP patterns such as enforcement endpoints, policy decision integrations, and attribute retrieval mechanisms; enhancing EMS and RPMS with automation for resource and role lifecycle management, attribute orchestration, and policy ingestion; collaborating with DevOps engineers on CI/CD, containerization, and deployment to Kubernetes or the government's installed application platform; troubleshooting complex identity, authentication, authorization, and policy issues; contributing to design specifications, data flow diagrams, and interface definitions; participating in integration, operational readiness, and deployment validation across multiple environments and security domains; and mentoring junior engineers in secure coding and ICAM integration best practices. This is a short‑term assignment with an expected duration of six months.

Required Skills/Experience

• Hands‑on experience developing or integrating systems related to identity, authentication, authorization, or enterprise security
• Experience implementing distributed systems or microservices architectures on modern platforms
• Experience supporting Agile teams and contributing to iterative delivery of new capabilities

Preferred Skills/Experience

• Experience with Kubernetes or OpenShift for deployment and container orchestration
• Programming experience with Java and/or Python
• Familiarity with GitOps tools
• Experience with Amazon Web Services (AWS), Linux, or containerization technologies
• Knowledge of identity and access standards (X.509, SAML, OAuth2, OIDC, LDAP)
• Experience with Oracle products or similar ICAM vendor technologies
• Experience implementing ABAC/RBAC models, policy‑based access controls, and Zero Trust‑aligned authorization patterns
• Experience supporting Intelligence Community (IC) or Department of War (DoW) systems, particularly authorization and identity‑centric services

Qualifications

• Active Top Secret security clearance; SCI eligibility required
• Ability to obtain a CI polygraph after hire
• Ability to obtain a DoD 8570‑compliant certification (e.g., Security+) within 90 days of hire

For positions requiring a federal security clearance, your clearance level must be clearly identified on your resume.