MP-ICAM / Identity Engineer

Peraton; Chantilly (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Peraton in Chantilly, VA seeks an advisor-level identity engineer for AFRH's DOD MP-ICAM integration. The role focuses on CAC/PIV, federation, directory, and privileged-access flows, with government-facing artifacts and ATO collaboration.

Required DOD ICAM and PKI fluency, U.S. citizenship, and NDA compliance. Federal facility access may be needed and security clearances may apply.

Qualifications

• 3–5 sentence combinations not exceeding 140 chars each are: Bachelor's + 8 yrs or higher, Master's + 6 yrs, PhD + 3 yrs, or 12 yrs without degree.
• Citizenship and federal facility access/background check required.
• NDA by Day 1 is mandatory.
• Experience with MP-ICAM or equivalent federal identity platform.

Responsibilities

• Design and implement AFRH's identity integration with DOD MP-ICAM.
• Configure CAC/PIV authentication, SAML/OAuth federation, and directory synchronization.
• Partner with Cyber/ATO/MDIO on identity controls for the ATO package.
• Support provisioning, deprovisioning, and privileged-access workflows.
• Author identity architecture artifacts and transmit to Government.

Skills

Advisor-level ICAM engineering

CAC/PIV, SAML, OAuth, OIDC, Active Dir

PKI operations & certificate lifecycle

MP-ICAM or Federal identity platform

Education

Bachelor's + 8 yrs

Master's + 6 yrs

PhD + 3 yrs

Associate's + 10 yrs

12 yrs experience without a degree

Job description

Required

Required Skills & Experience

• Advisor-level identity / ICAM engineering with DOD or Federal experience
• CAC/PIV, SAML, OAuth, OIDC, and Active Directory fluency
• PKI operations and certificate lifecycle management
• Experience with DOD MP-ICAM or an equivalent Federal identity platform

Specific Requirements

• Education & Experience: Bachelor's + 8 yrs; Master's + 6 yrs; PhD + 3 yrs; Associate's + 10 yrs; or 12 yrs experience without a degree.
• Federal facility access / background investigation clearance
• US. citizenship required.
• Signed Non-Disclosure Agreement (NDA) by Day 1.

Desired

Preferred Certifications & Qualifications

• At least one prior MP-ICAM or equivalent Federal identity integration
• CISSP, Security+, or equivalent
• DoD 8570 IAT-II/III
• SailPoint, Okta, or Ping identity-platform certification

You speak DOD ICAM and PKI as a first language. CAC, SAML, OAuth, Active Directory — all of it, cleanly, for AFRH.

Position Overview

Advisor-level identity engineer for AFRH's DOD MP-ICAM integration — CAC/PIV, federation, directory, and privileged-access flows.

What You'll Do

• Design and implement AFRH's identity integration with DOD MP-ICAM
• Configure CAC/PIV authentication, SAML/OAuth federation, and directory synchronization
• Partner with Cyber/ATO/MDIO on identity controls for the ATO package
• Support provisioning, deprovisioning, and privileged-access workflows
• Author identity architecture artifacts and transmit to Government

*** Contingent upon Contract award ***