Senior ICAM Engineer

E; Chantilly (VA); On-site; USD 130,000 - 180,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401(k) match

Paid time off

Job summary

E&M Technologies, Inc. is seeking a Senior ICAM Engineer in Chantilly, VA to support NGA. The role focuses on ICAM modernization, microservices development, and integration with PEP/PIP/RPMS components.

You will collaborate with architects and DevOps to deliver secure, scalable identity solutions across environments. Required qualifications include a STEM degree with 8+ years of experience, DoD security clearance, and ability to obtain Security+ within 90 days.

Qualifications

• Bachelor’s degree in a STEM field with 8+ years of relevant experience or equivalent.
• Hands-on experience with identity, authentication, authorization, or enterprise security.
• Experience building distributed systems or microservices on modern platforms.
• Experience supporting Agile teams and iterative delivery of capabilities.
• Ability to translate architectural guidance into engineering solutions., Ability to obtain Security+ within 90 days.

Responsibilities

• Implement ICAM modernization designs for PEP/PIP/EMS and RPMS components.
• Develop and integrate microservices for identity, attributes, authorization, resource registration, and policy distribution.
• Collaborate with Architect to convert designs into detailed tasks and interfaces.
• Support PI planning with technical input and risk identification.
• Develop new PEP/PIP patterns including enforcement endpoints and policy integrations.
• Enhance EMS and RPMS services with automation for lifecycle management and policy ingestion.
• Work with DevOps on CI/CD, containerization, and Kubernetes deployments.
• Troubleshoot identity, authentication, authorization, and policy issues across systems.
• Contribute to design docs, data flow diagrams, and interface definitions.
• Aim to reduce overhead and improve reliability and observability.
• Participate in integration and operational readiness testing across environments.
• Mentor junior engineers on secure coding, microservices, and ICAM integration.

Skills

ICAM expertise

Security+ readiness

Agile teamwork

DoD security awareness

Education

Bachelor’s degree in STEM

Tools

Kubernetes/OpenShift

Java

Python

GitOps

AWS

Linux

Job description

Description

POSITION: Senior ICAM Engineer

WORK LOCATION: Chantilly, VA

JOB CATEGORY: Information Technology

JOB TYPE: Full-Time

REQUISITION ID: EM07-57

CITIZENSHIP: United States Citizen

CLEARANCE TYPE: Top Secret/SCI

TRAVEL REQUIREMENTS: Up to 10%

E&M Technologies, Inc. is dedicated to recruiting and developing diverse, high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers’ mission and quest for professional growth. E&M provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do.

E&M Technologies, Inc. is currently seeking a Senior ICAM Engineer to join our team in Chantilly, VA in support of the National Geospatial-Intelligence Agency. The NGA delivers world-class geospatial intelligence that provides a decisive advantage to policymakers, military service members, intelligence professionals, and first responders.

Job Responsibilities

• Implement ICAM modernization designs for PEP/PIP/EMS and RPMS components, ensuring alignment with architectural patterns and modernization goals. Transition from the legacy PDP to JBlocks.
• Develop and integrate microservices supporting identity, attributes, authorization, resource registration, and policy distribution.
• Work closely with the Architect to translate high-level designs into detailed engineering tasks, technical artifacts, and system interfaces.
• Support the Technical Lead by providing technical input during Program Increment (PI) planning, backlog refinement, work estimation, and risk identification.
• Develop new PEP/PIP patterns including enforcement endpoints, policy decision integrations, and attribute retrieval mechanisms.
• Enhance EMS and RPMS services by implementing automation for resource/role lifecycle management, attribute orchestration, and policy ingestion workflows.
• Collaborate closely with Development and Operations (DevOps) engineers on Continuous Integration and Continuous Delivery (CI/CD), containerization, infrastructure automation, and deployment to Kubernetes or the governments currently installed application platform.
• Troubleshoot complex identity, authentication, authorization, and policy-related issues across legacy and modernized components.
• Contribute to engineering documentation including design specifications, data flow diagrams, configuration standards, and interface definitions.
• Ensure modernization activities reduce operational overhead and improve system reliability, maintainability, and observability.
• Participate in integration testing, operational readiness testing, and deployment validation across multiple environments and security domains.
• Mentor junior engineers and promote best practices in secure coding, microservices development, and ICAM integration.

Requirements

Minimum Qualifications

• Bachelor’s degree in a Science, Technology, Engineering, and Mathematics (STEM) field and 8+ years of relevant experience, or equivalent experience.
• Hands-on experience developing or integrating systems related to identity, authentication, authorization, or enterprise security.
• Experience implementing distributed systems or microservices architectures on modern platforms.
• Experience supporting Agile teams and contributing to iterative delivery of new capabilities.
• Ability to interpret architectural guidance and convert designs into high quality, maintainable engineering solutions.
• Ability to obtain Security+ within 90 days of hire.
• All candidates must be US CITIZENS to be considered for the position.
• Must have and be capable of maintaining a U.S. Department of Defense (DoD) security clearance at the required level and ability to pass a Counterintelligence Polygraph.

Preferred Qualifications

• Experience with Kubernetes or OpenShift for deployment and container orchestration.
• Programming experience with Java and/or Python.
• Familiarity with GitOps tools.
• Experience with Amazon Web Services (AWS), Linux, or containerization technologies.
• Knowledge of identity and access standards: X.509, SAML, OAuth2, OIDC, LDAP.
• Experience with Oracle products or similar ICAM vendor technologies.
• Experience implementing ABAC/RBAC models, policy-based access controls, and ZT aligned authorization patterns.
• Experience supporting Intelligence Community (IC) or Department of War (DoW) systems, particularly authorization and identity-centric services.

The salary range provided is a good faith estimate representative of all experience levels. E&M considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate’s work experience, location, education/training, and key skills.

• medical
• dental
• vision
• life insurance
• short-term disability
• long-term disability
• 401(k) match
• flexible spending accounts
• flexible work schedules
• parental leave
• paid time off
• holidays

Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.

This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.

E&M anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require E&M to shorten or extend the application window.

E&M is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. E&M provides affirmative action in employment for qualified Individuals with a Disability and Protected

Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.

As part of the federal government’s transition to the Trusted Workforce 2.0 Continuous Vetting framework, the Defense Counterintelligence and Security Agency (DCSA) is expanding enrollment in the FBI Rap Back program for cleared industry personnel beginning April 1, 2026.

Rap Back (Record of Arrest and Prosecution Back) is a service provided by the FBI that allows authorized agencies to receive notifications if there are updates to an individual’s criminal history record while they hold a security clearance. This supports continuous vetting of cleared personnel.

Per DCSA guidance, we are required to provide the following FBI privacy advisements to all cleared employees:

• FBI Privacy Act Notice

https://www.fbi.gov/how-we-can-help-you/more-fbi-services-and-information/compact-council/privacy-act-statement

• Noncriminal Justice Applicant’s Privacy Rights

https://www.fbi.gov/how-we-can-help-you/more-fbi-services-and-information/compact-council/guiding-principles-noncriminal-justice-applicants-privacy-rights