Secret ICAM Engineer

Insight Global; Fort Meade (MD); On-site; USD 120,000 - 170,000; Full time

Job summary

Insight Global is seeking an ICAM Architect/Engineer to serve as the ICAM SME for Azure-based DoD environments, implementing and optimizing enterprise systems in line with SOPs. You will monitor, configure, and maintain systems, while guiding IT support teams and stakeholders on ICAM architecture and policy.

The role requires an Active Secret clearance, DoD experience, and strong PowerShell scripting, with hands-on work on Active Directory, Entra ID, and federation technologies.

Qualifications

• Requires DoD experience and an Active Secret clearance.
• Minimum DoD 8140 IAT Level II certification or higher.
• 5+ years developing ICAM architectures and strategies.

Responsibilities

• Serve as ICAM SME for Azure-based DoD environments.
• Configure and maintain OS, applications, and system management tools.
• Develop and integrate customized ICAM software and hardware solutions.
• Plan automation to improve operational efficiency.
• Support security assessments, audits, and ATO activities.

Skills

Security clearance

ICAM architectures

PowerShell scripting

Active Directory

Azure AD / Entra ID

SAML / OIDC federation

PingFederate / PingDirectory

Zero Trust / NIST

Education

Bachelor's degree in Cybersecurity/Information Security/CS

Master's degree in STEM

Tools

PingFederate

Ping Directory

Intercede MyID

SailPoint IIQ

Job description

Job Description

Responsibilities:

Serve as the ICAM SME for Azure based DOD environments. Implement, maintain, and optimize enterprise systems in alignment with organizational standards and SOPs. Monitor and manage all installed systems, infrastructure, and directory services. Configure, test, and maintain operating systems, application software, and system management tools. Evaluate existing systems and provide technical guidance to IT support teams. Lead the development and integration of customized software and hardware solutions. Plan and implement automation to improve operational efficiency. Design and maintain security controls to ensure data integrity and system protection. Ensure high availability of technical resources and maintain accurate system inventories. Provide timely reporting and rapid response to system issues or outages. Support the development and enhancement of the client’s Enterprise Directory, including LDAP schema design, object classes, attributes, queries, and group structures. Develop directory integration solutions across directory and database systems. Configure and support enterprise Identity Management systems, including role based access, segregation of duties, workflow automation, and periodic access reviews. Review and implement ICAM integration requirements with adherence to an organization’s mission, goals, and standards. Experience working in client services environments and engaging with both business and technical stakeholders. Prepare technical standards, provide technical advice and guidance, and collaborate with other programmers to conceptualize and develop design. Demonstrated ability to write technical documentation, including product analysis, as-is/to-be architectures, and network and infrastructure diagrams. Demonstrated experience in migration of ICAM technologies, including transitioning legacy applications to innovative and best of breed solutions. Experience developing and briefing materials and executive summaries on ICAM architecture, implementation, and policy. Support security assessments, audits, and ATO activities, including documentation and control evidence related to ICAM.

Skills and Requirements

Active Secret security clearance. Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related STEM (Science, Technology, Engineering and Mathematics) discipline. 10+ years of technical experience developing ICAM architectures and strategies with a wide array of products (e.g., Intercede MyID, SailPointIIQ, Okta, CyberArk, PKI). Minimum DoD 8140 IAT Level II certification (e.g., CompTIA Security+, CySA+, GSEC, SSCP). Ability to work 5 days/week onsite at 6910 Cooper Ave, Ft. Meade, MD. Experience with the following: Configuring and troubleshooting SAML/OIDC federation, OAuth/SCIM provisioning, LDAP integrations, attribute mappings, and partner identity connections. Supporting multi-partner ICAM integrations, SSO, directory synchronization, access policies, and end-to-end identity flow troubleshooting across secure enterprise environments. Strong PowerShell scripting experience. Knowledge of: ADFS, Azure App Proxy, WPAD, and MFA technologies, especially Certificate Based Authentication (CBA). Deep knowledge of Active Directory, including: Domain controller maintenance and upgrades, GPO management, DNS and core AD infrastructure. Experience with Entra ID (Azure AD), including: Application registrations and SSO onboarding, Intune policy management, DNS and core AD infrastructure. Understanding of PKI technologies (LDAP directories, HSMs, OCSP) and security best practices. Experience working within large federal IT infrastructures. Recent experience with deployment of identity and credential management solutions; knowledge of federal cybersecurity and zero trust policies, requirements and standards. Strong understanding stakeholder requirements and expectations, system architecture, infrastructure build and documentation, configuration and deployment, as well as existing and emerging federal policy including HSPD-12 and NIST documents. Exceptional analytical, problem-solving, and communication skills. Strong decision-making ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution. Proven ability to remain calm, decisive, and methodical under pressure. Advanced proficiency with Microsoft Office tools and O365, including Word, Excel, PowerPoint, Teams, Outlook, and SharePoint. Experience designing, implementing, and supporting ICAM solutions in Microsoft Azure cloud environments. Master’s degree in a STEM discipline. Prior experience with DoD environments and components/organizations. DoD 8140 IAT Level 3 or other advanced certification (CISSP, CISM, GIAC GSLC/GSOM, CEH). Knowledge of IAM in both on-premise and cloud architectures (e.g., AWS, Azure). Serve as the Ping Identity SME. Expertise with PingFederate and Ping Directory. Experience with Zero Trust Architectures and aligning ICAM tools to an agency's ZTA mission. Experience with emerging technologies such as AI/ML and quantum security and the application to cybersecurity. Experience with: PingFederate, Netwrix Auditor, Splunk, Quest Recovery Manager for AD (RMAD), SDM Change Manager for Group Policy (CMGP), Knowledge of Microsoft Identity Manager (MIM). Experience with federated identity and web services security (SAML, ADFS, WS Federation, WS Security). Familiarity with Microsoft 365 and Azure AD integration. Ability to quickly learn new technologies and tools.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].