Identity Architect for ICAM, PAM & Zero-Trust

Booz Allen Hamilton; United States; On-site; USD 62,000 - 141,000; Full time

Job summary

Booz Allen Hamilton is seeking an Identity System Engineer and Administrator to architect, deploy, and operate zero-trust and data-centric security environments across DoW clients in the Indo-Pacific. You will manage ICAM, PAM, and machine identity, interfacing with internal teams to ensure resilient systems.

You should have 8+ years of identity management experience, familiarity with Microsoft, Ping, SailPoint, or CyberARK, VMware, and hybrid networks, plus a Secret clearance.

Qualifications

• 8+ years of experience designing, deploying, and configuring identity management solutions.
• Experience with a vendor such as Microsoft, Ping, SailPoint, or CyberARK.
• Experience in virtual environment management such as VMWare solutions.
• Experience with hybrid networks and edge technologies.
• Experience documenting and diagraming technical architectures.
• Secret clearance.
• HS diploma or GED.

Responsibilities

• Architect, deploy, and operate zero-trust and data-centric security environments.
• ICAM, PAM, and non-person entity identities (OT/machine identity).
• Interface with stakeholders and internal teams to ensure resilient environments.
• Mentor storage engineers to help them grow into tomorrow’s data architects.

Skills

Identity management

Vendor products

VMware

Hybrid networks

Architecture documentation

Security clearance

HS diploma or GED

Education

HS diploma or GED

Bachelor's degree in IT/Cybersecurity/Engineering

Tools

Microsoft IAM/Azure

CIMP

CIAM

CIGE

Azure IAM

Red Hat Certification

Job description

Booz Allen Hamilton is seeking an Identity System Engineer and Administrator to architect, deploy, and operate zero-trust and data-centric security environments across DoW clients in the Indo-Pacific. You will manage ICAM, PAM, and machine identity, interfacing with internal teams to ensure resilient systems.

You should have 8+ years of identity management experience, familiarity with Microsoft, Ping, SailPoint, or CyberARK, VMware, and hybrid networks, plus a Secret clearance.