Senior ICAM Engineer

Resource Management Concepts, Inc.; Charleston (SC); Vor Ort; USD 140.000 - 180.000; Vollzeit

Benefits dieser Stelle

Paid vacation and federal holidays

Health insurance plans

401K with company match

Zusammenfassung

Resource Management Concepts, Inc. (RMC) seeks an Identity, Credential, and Access Management (ICAM) Engineer to develop and maintain enterprise identity services.

The role covers federation, API development, and application integration within DoD/Intelligence Community environments, onsite in Charleston, SC. You’ll work with developers and security staff to connect identity services with mission systems, troubleshoot authentication, and implement secure access controls across domains.

Qualifikationen

• Experience implementing and operating IAM services in enterprise environments.
• Hands-on with federation, OIDC, attributes, and access mappings.
• Ability to troubleshoot authentication across apps, providers, and networks.
• Strong knowledge of AD/LDAP, provisioning, synchronization, and entitlements.
• Knowledge of security controls and identity data protection.

Aufgaben

• Implement and integrate enterprise ICAM services with mission applications and directories.
• Develop APIs and service integrations for identity information and access decisions.
• Configure federation, SSO, and authentication using OIDC and standards.
• Integrate identity platforms with Active Directory and personnel systems.
• Automate provisioning and deprovisioning, maintain identity attributes and entitlements.
• Support migration from legacy IAM platforms to modern services.
• Maintain virtual directory services, data aggregation, synchronization, and replication.
• Collaborate with developers to resolve authentication failures and token mapping issues.
• Support federation across networks and cross-domain transfer processes.
• Protect identity data with encryption and secure communications.
• Work in environments with intermittent connectivity with approved caching.
• Document configurations, baselines, test procedures, and guidance.

Kenntnisse

OIDC

Federation

Application integration

Troubleshooting

Identity attributes

Access control

Cybersecurity

Problem solving

Ausbildung

Bachelor’s degree (Cybersecurity / CS / IT or related)

Master’s degree preferred

Tools

PingFederate

Radiant Logic

SailPoint

Keycloak

Okta

Secret Server

Active Directory

LDAP

Kubernetes

OpenShift

Jobbeschreibung

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.

RMCis seeking an Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services supporting mission applications and secure information sharing. This role combines identity federation, directory integration, account provisioning, and application development within Department of Defense and Intelligence Community environments.

The engineer will work with software developers, infrastructure engineers, and security personnel to connect identity services with mission systems. Candidates should understand how authentication, identity attributes, and authorization decisions work across an enterprise and be able to troubleshoot the configurations, interfaces, and application code that support those functions.

This position is contingent on contract award and position availability. It is a full-time, on-site role at a Government facility in Charleston, SC.

What You’ll Do:

• Implement and integrate enterprise ICAM services with mission applications, directories, and authoritative identity and attribute sources.

• Develop and maintain Application Programming Interfaces (APIs) and service integrations that provide identity information and support access control decisions.

• Configure and troubleshoot identity federation, single sign-on, and application authentication using OpenID Connect (OIDC) and other applicable standards.

• Integrate identity platforms with Active Directory, enterprise directories, and personnel and training systems.

• Automate account and group provisioning, updates, and deprovisioning while maintaining accurate identity attributes and access entitlements.

• Support migration from legacy identity platforms to modern services, preserving configurations, identity mappings, provisioning behavior, and application functionality.

• Implement and maintain virtual directory services, identity data aggregation, synchronization, and replication.

• Work with application developers to resolve authentication failures, token and claim mapping issues, and authorization inconsistencies.

• Support identity federation across networks and mission partners, applying approved data-sharing restrictions and cross-domain transfer processes.

• Protect identity data through encryption, appropriate access controls, and secure service communications.

• Support identity services in environments with intermittent or limited connectivity, including approved caching and synchronization of identity and authorization information.

• Use automation and configuration management to establish consistent identity service deployments across environments.

• Maintain integration documentation, configuration baselines, test procedures, and operational guidance.

• Active TS/SCI clearance with the ability to obtain a CI polygraph.

• Prior Intelligence Community support experience.

• Bachelor’s degree in Cybersecurity, Computer/Electrical/Electronics Engineering, or Mathematics with a computer science concentration, or equivalent.

• 10+ years of directly relevant experience.

• Experience implementing, integrating, or operating enterprise IAM services.

• Hands-on experience with federation, OIDC, and application integration, including claims, attributes, and access mappings.

• Experience with Active Directory, LDAP, identity lifecycles, provisioning, synchronization, and entitlements.

• Experience developing APIs, scripts, or integrations for identity services.

• Ability to troubleshoot authentication and authorization across applications, identity providers, directories, and networks.

• Knowledge of role- and attribute-based access controls, least privilege, and identity data protection.

• Experience documenting, testing, and managing changes in secure environments.

• Ability to meet applicable cybersecurity workforce qualifications.

• Availability to work full-time onsite at a Government facility.

Desired Skills

Master’s degree in a field listed above or equivalent.

• CompTIA Security+ certification.
• Experience with PingFederate, Radiant Logic, SailPoint, Keycloak, Okta, or Secret Server.
• Identity-provider migrations, including application code, claims, tokens, and identity mappings.
• Directory modernization, virtual directories, Microsoft Identity Manager, and legacy provisioning migrations.
• SAML, OAuth 2.0, and SCIM.
• Go, Python, Ansible, or similar integration and automation tools.
• AWS/GovCloud, Kubernetes, OpenShift, and DoD IL5 environments.
• PKI, certificate-based authentication, certificate lifecycle management, and secure credentials.
• Cross-domain federation or identity services in DDIL environments.
• Zero Trust integration using identity attributes and policy-based access decisions.

At RMC, we’re committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees.

RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.

Salary at RMC is determined by various factors, including but not limited to location, a candidate’s specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements.