Senior ICAM Engineer

Trinity Global Consulting; Chantilly (VA); On-site; USD 130,000 - 190,000; Full time

Benefits offered by this job

Medical, Dental & Vision Coverage

PTO

11 federal holidays

Disability & Life Insurance

401(k) Retirement Plan

Professional Training

Job summary

Trinity Global Consulting seeks a senior ICAM engineer to lead modernization efforts across PEP/PIP, EMS, and RPMS components. The role emphasizes translating architecture into concrete engineering tasks, and integrating microservices for identity, attributes, authorization, and policy distribution.

You will collaborate with the Architect, support PI planning, and help drive secure, scalable ICAM solutions with Kubernetes/OpenShift deployments and GOV platform automation.

Qualifications

• Bachelor’s degree in STEM field with 8+ years of relevant experience or equivalent.
• Hands-on experience with identity/authentication/authorization systems and enterprise security.
• Experience deploying distributed systems or microservices on modern platforms.
• Experience supporting Agile teams and iterative capability delivery.
• Ability to translate architecture guidance into detailed engineering artifacts.
• Must obtain CompTIA Security+ within 90 days of hire.
• Active TS clearance with SCI eligibility and US citizenship.
• US citizenship is required.

Responsibilities

• Implement ICAM modernization designs for PEP/PIP, EMS, RPMS components in line with modernization goals.
• Develop and integrate microservices for identity, attributes, authorization, and policy distribution.
• Collaborate with Architect to turn high-level designs into engineering tasks and interfaces.
• Support Technical Lead in PI planning, backlog refinement, estimation, and risk identification.
• Develop PEP/PIP patterns including enforcement endpoints and attribute retrieval.
• Enhance EMS/RPMS services with automation for resource/role lifecycle, attributes, and policy ingestion workflows.
• Coordinate with DevOps on CI/CD, containerization, and deployment to Kubernetes or gov platform.
• Troubleshoot identity, authentication, authorization, and policy issues across legacy and modern components.
• Produce engineering documentation: design specs, data flows, configurations, and interfaces.
• Ensure modernization reduces overhead and improves reliability and observability.
• Participate in integration testing, readiness testing, and deployment validation across environments.
• Mentor junior engineers on secure coding, microservices, and ICAM integration.

Skills

Identity security

Microservices

Agile teams

Security clearance

US citizenship

Kubernetes/OpenShift

GitOps

AWS/Linux

Zero Trust

Education

Bachelor’s degree in STEM field

Tools

Kubernetes

OpenShift

GitOps

AWS

Linux

Containerization

Job description

Duties May Include

• Implement ICAM modernization designs for PEP/PIP, EMS, and RPMS components, ensuring alignment with architectural patterns and modernization goals, including transition from the legacy PDP to JBlocks.
• Develop and integrate microservices supporting identity, attributes, authorization, resource registration, and policy distribution.
• Collaborate with the Architect to translate high-level designs into detailed engineering tasks, technical artifacts, and system interfaces.
• Support the Technical Lead by providing technical input during Program Increment (PI) planning, backlog refinement, work estimation, and risk identification.
• Develop new PEP/PIP patterns, including enforcement endpoints, policy decision integrations, and attribute retrieval mechanisms.
• Enhance EMS and RPMS services by implementing automation for resource/role lifecycle management, attribute orchestration, and policy ingestion workflows.
• Coordinate with DevOps engineers on CI/CD, containerization, infrastructure automation, and deployment to Kubernetes or the government’s currently installed application platform.
• Troubleshoot complex identity, authentication, authorization, and policy-related issues across legacy and modernized components.
• Produce engineering documentation, including design specifications, data flow diagrams, configuration standards, and interface definitions.
• Ensure modernization activities reduce operational overhead and improve system reliability, maintainability, and observability.
• Participate in integration testing, operational readiness testing, and deployment validation across multiple environments and security domains.
• Mentor junior engineers and promote best practices in secure coding, microservices development, and ICAM integration.

Required Qualifications

• Bachelor’s degree in a Science, Technology, Engineering, and Mathematics (STEM) field and 8+ years of relevant experience, or equivalent experience.
• Hands‑on experience developing or integrating systems related to identity, authentication, authorization, or enterprise security.
• Experience implementing distributed systems or microservices architectures on modern platforms.
• Experience supporting Agile teams and contributing to iterative delivery of new capabilities.
• Ability to interpret architectural guidance and convert designs into high-quality, maintainable engineering solutions.
• Ability to obtain CompTIA Security+ within 90 days of hire.
• Active Top Secret security clearance upon hire with SCI eligibility.
• U.S. citizenship.

Desired Qualifications

• Experience with Kubernetes or OpenShift for deployment and container orchestration.
• Programming experience with Java and/or Python.
• Familiarity with GitOps tools.
• Experience with Amazon Web Services (AWS), Linux, or containerization technologies.
• Knowledge of identity and access standards: X.509, SAML, OAuth2, OIDC, LDAP.
• Experience with Oracle products or similar ICAM vendor technologies.
• Experience implementing ABAC/RBAC models, policy-based access controls, and Zero Trust–aligned authorization patterns.
• Experience supporting Intelligence Community (IC) or Department of War (DoW) systems, particularly authorization and identity‑centric services.

At Trinity Global Consulting (TGC), we value our employees and provide a comprehensive benefits package that includes:

• Medical, Dental & Vision Coverage – Coverage for eligible employees and family through CareFirst and VSP.
• Paid Time Off – PTO granted in accordance with contract requirements.
• Paid Holidays – 11 federal holidays observed annually.
• Disability & Life Insurance – Short-term/long-term disability, life insurance, and AD&D coverage included.
• 401(k) Retirement Plan – Competitive plan managed through Ameritas.
• Professional Training – Formal training provided as required, with additional learning opportunities based on role.