Identity & Access Management (ICAM) Engineer (TS/SCI Clearance Required)

North-Point-Technology; Chantilly (VA); On-site; USD 150,000 - 190,000; Full time

Job summary

North Point Technology in Chantilly, VA seeks a Senior ICAM Engineer with TS/SCI clearance to design, develop and deploy modernized identity and access management capabilities. You will implement microservices, integrate with PEP/PIP, EMS and RPMS, and mentor junior engineers while adhering to IC security standards.

The role requires hands-on experience with distributed systems, Kubernetes/OpenShift deployments, and cloud/Linux environments, plus familiarity with ABAC/RBAC and Zero Trust

Qualifications

• Hands-on experience with identity, authentication, and authorization systems.
• Experience building distributed, microservices-based platforms.
• Familiarity with Agile software delivery and PI planning.

Responsibilities

• Design ICAM modernization solutions and implement microservices for identity and access.
• Integrate with PEP/PIP, EMS, RPMS and ensure secure interfaces.
• Collaborate with architects and lead engineers to translate designs into tasks.
• Mentor junior engineers on secure ICAM integration and coding practices.

Skills

Identity and access security

Distributed systems

Agile delivery

ICAM/Zero Trust knowledge

Security best practices

Tools

Kubernetes/OpenShift

Java

Python

GitOps

AWS/Linux containers

Job description

Identity & Access Management (ICAM) Engineer (TS/SCI Clearance Required)

Chantilly, Virginia, United States

North Point Technology is looking to hire a Senior ICAM Engineer to support the GEOAxIS modernization effort. The qualified candidate must have an active Top Secret (TS) security clearance and be eligible for SCI access, and will implement the Architect's designs and the Technical Lead's engineering direction to design, develop, integrate, test, and troubleshoot modernized ICAM capabilities. The ideal candidate is a strong hands-on contributor across multiple modernization workstreams with deep experience building secure, microservices-based identity and access solutions.

This program requires employees to have an active TS clearance with eligibility to obtain SCI and CI Poly.

If you have a Full Scope Poly, working this program will keep your Full Scope ACTIVE.

Responsibilities:

This position implements ICAM modernization designs for PEP/PIP, EMS, and RPMS components, aligning with established architectural patterns and guiding the transition from the legacy PDP to JBlocks. Duties include developing and integrating microservices that support identity, attributes, authorization, resource registration, and policy distribution; working with the Architect to translate high-level designs into detailed engineering tasks and system interfaces; supporting the Technical Lead during Program Increment (PI) planning, backlog refinement, estimation, and risk identification; building new PEP/PIP patterns such as enforcement endpoints, policy decision integrations, and attribute retrieval mechanisms; enhancing EMS and RPMS with automation for resource and role lifecycle management, attribute orchestration, and policy ingestion; collaborating with DevOps engineers on CI/CD, containerization, and deployment to Kubernetes or the government's installed application platform; troubleshooting complex identity, authentication, authorization, and policy issues; contributing to design specifications, data flow diagrams, and interface definitions; participating in integration, operational readiness, and deployment validation across multiple environments and security domains; and mentoring junior engineers in secure coding and ICAM integration best practices. This is a short-term assignment with an expected duration of six months.

Required Skills/Experience:

• Hands-on experience developing or integrating systems related to identity, authentication, authorization, or enterprise security
• Experience implementing distributed systems or microservices architectures on modern platforms
• Experience supporting Agile teams and contributing to iterative delivery of new capabilities

Preferred Skills/Experience:

• Experience with Kubernetes or OpenShift for deployment and container orchestration
• Programming experience with Java and/or Python
• Familiarity with GitOps tools
• Experience with Amazon Web Services (AWS), Linux, or containerization technologies
• Knowledge of identity and access standards (X.509, SAML, OAuth2, OIDC, LDAP)
• Experience with Oracle products or similar ICAM vendor technologies
• Experience implementing ABAC/RBAC models, policy-based access controls, and Zero Trust-aligned authorization patterns
• Experience supporting Intelligence Community (IC) or Department of War (DoW) systems, particularly authorization and identity-centric services

Qualifications:

• Active Top Secret security clearance; SCI eligibility required
• Ability to obtain a CI polygraph after hire
• Ability to obtain a DoD 8570-compliant certification (e.g., Security+) within 90 days of hire

North Point Technology is THE BEST place to work for curious-minded engineers motivated to support our country’s most crucial missions! We focus on long term projects, leveraging the latest technology in support of innovative solutions to solve our customer’s most difficult problems.

At North Point Technology, EMPLOYEES come first! We value our employees by providing excellent compensation, benefits, and a flexible work-life balance. We strive for a close-knit and open atmosphere where the owners are always directly available to our team members.

Come join us! Apply with North Point Technology today!

For positions requiring a federal security clearance, your clearance level must be clearly identified on your resume.

Do you have an active security clearance? * Select...

How many years have you worked in a classified environment? * Select...

Select...

Answer yes to attest that the answers to the above questions are factual and truthful. * Select...