Senior ICAM Engineer

Triglocon; Chantilly (VA); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Medical, Dental & Vision Coverage

PTO

Paid Holidays

Disability & Life Insurance

401(k) Retirement Plan

Professional Training

Job summary

Trinity Global Consulting (TGC) seeks an experienced ICAM engineer to implement modernization designs for PEP/PIP, EMS, and RPMS components, aligning with architectural patterns and transitioning from legacy PDP to JBlocks.

You will develop and integrate microservices supporting identity, attributes, authorization, resource registration, and policy distribution, collaborating with the Architect to translate designs into engineering tasks and interfaces.

Qualifications

• Bachelor's degree in a STEM field and 8+ years of relevant experience, or equivalent experience.
• Hands-on experience developing or integrating systems related to identity, authentication, authorization, or enterprise security.
• Experience implementing distributed systems or microservices architectures on modern platforms.
• Experience supporting Agile teams and contributing to iterative delivery of new capabilities.
• Ability to interpret architectural guidance and convert designs into high-quality, maintainable engineering solutions.
• Ability to obtain CompTIA Security+ within 90 days of hire.
• Active Top Secret security clearance upon hire with SCI eligibility.
• U.S. citizenship.

Responsibilities

• Implement ICAM modernization designs for PEP/PIP, EMS, and RPMS components.
• Develop and integrate microservices supporting identity, attributes, authorization, resource registration, and policy distribution.
• Collaborate with the Architect to translate high-level designs into detailed engineering tasks, artifacts, and interfaces.
• Support the Technical Lead with PI planning, backlog refinement, work estimation, and risk identification.
• Develop new patterns, including enforcement endpoints, policy integrations, and attribute retrieval mechanisms.
• Enhance EMS and RPMS services with automation for lifecycle management, attribute orchestration, and policy ingestion workflows.
• Coordinate with DevOps on CI/CD, containerization, infrastructure automation, and deployment to Kubernetes or government platform.
• Troubleshoot identity, authentication, authorization, and policy issues across legacy and modernized components.
• Produce engineering documentation including design specs, data flows, configuration standards, and interface definitions.
• Ensure modernization reduces overhead and improves reliability and observability.
• Participate in integration testing, operational readiness testing, and deployment validation across environments and security domains.
• Mentor junior engineers and promote secure coding and ICAM best practices.

Skills

Identity security

Distributed systems

Agile delivery

Architecture translation

Education

B.S. in STEM

Equivalent experience

Tools

Kubernetes

OpenShift

AWS/Linux

GitOps

Job description

Duties May Include

• Implement ICAM modernization designs for PEP/PIP, EMS, and RPMS components, ensuring alignment with architectural patterns and modernization goals, including transition from the legacy PDP to JBlocks.
• Develop and integrate microservices supporting identity, attributes, authorization, resource registration, and policy distribution.
• Collaborate with the Architect to translate high-level designs into detailed engineering tasks, technical artifacts, and system interfaces.
• Support the Technical Lead by providing technical input during Program Increment (PI) planning, backlog refinement, work estimation, and risk identification.
• Develop new PEP/PIP patterns, including enforcement endpoints, policy decision integrations, and attribute retrieval mechanisms.
• Enhance EMS and RPMS services by implementing automation for resource/role lifecycle management, attribute orchestration, and policy ingestion workflows.
• Coordinate with DevOps engineers on CI/CD, containerization, infrastructure automation, and deployment to Kubernetes or the government's currently installed application platform.
• Troubleshoot complex identity, authentication, authorization, and policy-related issues across legacy and modernized components.
• Produce engineering documentation, including design specifications, data flow diagrams, configuration standards, and interface definitions.
• Ensure modernization activities reduce operational overhead and improve system reliability, maintainability, and observability.
• Participate in integration testing, operational readiness testing, and deployment validation across multiple environments and security domains.
• Mentor junior engineers and promote best practices in secure coding, microservices development, and ICAM integration.

Required Qualifications

• Bachelor's degree in a Science, Technology, Engineering, and Mathematics (STEM) field and 8+ years of relevant experience, or equivalent experience.
• Hands-on experience developing or integrating systems related to identity, authentication, authorization, or enterprise security.
• Experience implementing distributed systems or microservices architectures on modern platforms.
• Experience supporting Agile teams and contributing to iterative delivery of new capabilities.
• Ability to interpret architectural guidance and convert designs into high-quality, maintainable engineering solutions.
• Ability to obtain CompTIA Security+ within 90 days of hire.
• Active Top Secret security clearance upon hire with SCI eligibility.
• U.S. citizenship.

Desired Qualifications

• Experience with Kubernetes or OpenShift for deployment and container orchestration.
• Programming experience with Java and/or Python.
• Familiarity with GitOps tools.
• Experience with Amazon Web Services (AWS), Linux, or containerization technologies.
• Knowledge of identity and access standards: X.509, SAML, OAuth2, OIDC, LDAP.
• Experience with Oracle products or similar ICAM vendor technologies.
• Experience implementing ABAC/RBAC models, policy-based access controls, and Zero Trust–aligned authorization patterns.
• Experience supporting Intelligence Community (IC) or Department of War (DoW) systems, particularly authorization and identity-centric services.

At Trinity Global Consulting (TGC), we value our employees and provide a comprehensive benefits package that includes:

• Medical, Dental & Vision Coverage – Coverage for eligible employees and family through CareFirst and VSP.
• Paid Time Off – PTO granted in accordance with contract requirements.
• Paid Holidays – 11 federal holidays observed annually.
• Disability & Life Insurance – Short-term/long-term disability, life insurance, and AD&D coverage included.
• 401(k) Retirement Plan – Competitive plan managed through Ameritas.
• Professional Training – Formal training provided as required, with additional learning opportunities based on role.