Senior ICAM Engineer

E&M Technologies, Inc.; Chantilly (VA); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Restaurant d'entreprise

Indemnités de stage/alternance

Job summary

E&M Technologies, Inc. in Chantilly, VA, is seeking a Senior ICAM Engineer to support NGA. You will implement ICAM modernization designs, develop microservices for identity and policy distribution, and work with architects and DevOps.

The role requires a STEM degree with 8+ years experience, DoD clearance, and US citizenship. Knowledge of Kubernetes/OpenShift, Java/Python, and IAM standards is highly preferred.

Qualifications

• Bachelor’s degree in STEM and 8+ years of relevant experience.
• Hands-on experience developing or integrating identity, authentication, authorization, or enterprise security systems.
• Experience implementing distributed systems or microservices on modern platforms.
• Experience supporting Agile teams and delivering iteratively.
• Ability to translate architectural guidance into maintainable engineering solutions.
• Ability to obtain Security+ within 90 days of hire.
• U.S. citizenship is required for consideration.
• Must maintain a DoD security clearance and pass a Counterintelligence Polygraph.

Responsibilities

• Implement ICAM modernization designs for PEP/PIP/EMS and RPMS components.
• Develop microservices for identity, attributes, authorization, resource registration, and policy distribution.
• Collaborate with Architect to translate designs into detailed tasks and interfaces.
• Support Technical Lead in PI planning, backlog refinement, estimates, and risk.
• Develop PEP/PIP patterns including enforcement endpoints and attribute retrieval.
• Enhance EMS/RPMS with automation for lifecycle management and policy ingestion.
• Work with DevOps on CI/CD, containerization, IaC, and deployment to Kubernetes.
• Troubleshoot identity, authentication, authorization, and policy issues across systems.
• Contribute to design docs, data flow diagrams, and interface definitions.
• Improve reliability, observability, and reduce operational overhead.
• Participate in integration/operational readiness testing and deployment validation.
• Mentor junior engineers on secure coding and ICAM integration.

Skills

Identity management

Authentication

Authorization

Enterprise security

Distributed systems

Agile development

Security+ readiness

US citizenship

DoD clearance

Education

Bachelor’s degree in STEM

Tools

Kubernetes

OpenShift

Java

Python

GitOps

AWS

Linux

OAuth2

OIDC

SAML

X.509

RBAC/ABAC

ICAM

Job description

Description

POSITION: Senior ICAM Engineer

WORK LOCATION: Chantilly, VA

JOB CATEGORY: Information Technology

JOB TYPE: Full-Time

REQUISITION ID: EM07-57

CITIZENSHIP: United States Citizen

CLEARANCE TYPE: Top Secret/SCI

TRAVEL REQUIREMENTS: Up to 10%

E&M Technologies, Inc. is dedicated to recruiting and developing diverse, high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers’ mission and quest for professional growth. E&M provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do.

E&M Technologies, Inc. is currently seeking a Senior ICAM Engineer to join our team in Chantilly, VA in support of the National Geospatial-Intelligence Agency. The NGA delivers world-class geospatial intelligence that provides a decisive advantage to policymakers, military service members, intelligence professionals, and first responders.

Job Responsibilities:

• Implement ICAM modernization designs for PEP/PIP/EMS and RPMS components, ensuring alignment with architectural patterns and modernization goals. Transition from the legacy PDP to JBlocks.
• Develop and integrate microservices supporting identity, attributes, authorization, resource registration, and policy distribution.
• Work closely with the Architect to translate high-level designs into detailed engineering tasks, technical artifacts, and system interfaces.
• Support the Technical Lead by providing technical input during Program Increment (PI) planning, backlog refinement, work estimation, and risk identification.
• Develop new PEP/PIP patterns including enforcement endpoints, policy decision integrations, and attribute retrieval mechanisms.
• Enhance EMS and RPMS services by implementing automation for resource/role lifecycle management, attribute orchestration, and policy ingestion workflows.
• Collaborate closely with Development and Operations (DevOps) engineers on Continuous Integration and Continuous Delivery (CI/CD), containerization, infrastructure automation, and deployment to Kubernetes or the governments currently installed application platform.
• Troubleshoot complex identity, authentication, authorization, and policy-related issues across legacy and modernized components.
• Contribute to engineering documentation including design specifications, data flow diagrams, configuration standards, and interface definitions.
• Ensure modernization activities reduce operational overhead and improve system reliability, maintainability, and observability.
• Participate in integration testing, operational readiness testing, and deployment validation across multiple environments and security domains.
• Mentor junior engineers and promote best practices in secure coding, microservices development, and ICAM integration.

Requirements

Minimum Qualifications:

• Bachelor’s degree in a Science, Technology, Engineering, and Mathematics (STEM) field and 8+ years of relevant experience, or equivalent experience.
• Hands‑on experience developing or integrating systems related to identity, authentication, authorization, or enterprise security.
• Experience implementing distributed systems or microservices architectures on modern platforms.
• Experience supporting Agile teams and contributing to iterative delivery of new capabilities.
• Ability to interpret architectural guidance and convert designs into high quality, maintainable engineering solutions.
• Ability to obtain Security+ within 90 days of hire.
• All candidates must be US CITIZENS to be considered for the position.
• Must have and be capable of maintaining a U.S. Department of Defense (DoD) security clearance at the required level and ability to pass a Counterintelligence Polygraph.

Preferred Qualifications:

• Experience with Kubernetes or OpenShift for deployment and container orchestration.
• Programming experience with Java and/or Python.
• Familiarity with GitOps tools.
• Experience with Amazon Web Services (AWS), Linux, or containerization technologies.
• Knowledge of identity and access standards: X.509, SAML, OAuth2, OIDC, LDAP.
• Experience with Oracle products or similar ICAM vendor technologies.
• Experience implementing ABAC/RBAC models, policy-based access controls, and ZT aligned authorization patterns.
• Experience supporting Intelligence Community (IC) or Department of War (DoW) systems, particularly authorization and identity-centric services.

The salary range provided is a good faith estimate representative of all experience levels. E&M considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate’s work experience, location, education/training, and key skills.

Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.

This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.

E&M anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require E&M to shorten or extend the application window.

E&M is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. E&M provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.

As part of the federal government’s transition to the Trusted Workforce 2.0 Continuous Vetting framework, the Defense Counterintelligence and Security Agency (DCSA) is expanding enrollment in the FBI Rap Back program for cleared industry personnel beginning April 1, 2026.

Rap Back (Record of Arrest and Prosecution Back) is a service provided by the FBI that allows authorized agencies to receive notifications if there are updates to an individual’s criminal history record while they hold a security clearance. This supports continuous vetting of cleared personnel.

Per DCSA guidance, we are required to provide the following FBI privacy advisements to all cleared employees:

FBI Privacy Act Notice

https://www.fbi.gov/how-we-can-help-you/more-fbi-services-and-information/compact-council/privacy-act-statement

Noncriminal Justice Applicant’s Privacy Rights

https://www.fbi.gov/how-we-can-help-you/more-fbi-services-and-information/compact-council/guiding-principles-noncriminal-justice-applicants-privacy-rights