Remote Zero-Trust ICAM Engineer

Booz Allen; Fayetteville (NC); Hybrid; USD 113,000 - 257,000; Full time

Job summary

Booz Allen Hamilton seeks an experienced ICAM Engineer to design secure identity solutions for the Department of War and champion a zero-trust strategy. You will architect scalable identities across IdPs, IGA, and PAM, and mentor engineers while delivering mission-focused results.

You’ll work across on‑prem, cloud, and hybrid environments, ensure robust authentication, and help modernize identity frameworks to protect critical infrastructure from cyber threats.

Qualifications

• 3+ years of ICAM experience with major suites (IBM Verify Identity, Ping Identity, SailPoint, BeyondTrust, HashiCorp Vault, Entra or Okta).
• Experience with Privileged Access Management (PAM) architectures to secure credentials, record sessions, and enforce least-privilege.
• Experience with RBAC and ABAC.

Responsibilities

• Design and implement identity architectures aligned with zero trust principles.
• Secure identity lifecycles across on-prem, cloud, and hybrid environments.
• Create architecture products, design specs, and technical requirements for identity and access strategies.
• Evaluate and integrate technologies for IdPs, IGA, and PAM (Ping, SailPoint, Beyond Trust).
• Transform legacy identity systems into scalable, secure platforms.
• Mentor and develop engineers, fostering innovation and technical excellence.

Skills

ICAM suites

Privileged Access Management

RBAC ABAC

Authentication protocols

Network troubleshooting

TS SCI clearance

DOW IAT Level II

Scripting & automation

Education

HS diploma or GED

DOW IAT Level II Certification (Security+/CySA+)

Tools

Ping Identity

SailPoint

BeyondTrust

HashiCorp Vault

Entra

Okta

IBM Verify Identity

Job description

Booz Allen Hamilton seeks an experienced ICAM Engineer to design secure identity solutions for the Department of War and champion a zero-trust strategy. You will architect scalable identities across IdPs, IGA, and PAM, and mentor engineers while delivering mission-focused results.

You’ll work across on‑prem, cloud, and hybrid environments, ensure robust authentication, and help modernize identity frameworks to protect critical infrastructure from cyber threats.