Senior ICAM Engineer

Resource Management Concepts, Inc.; Charleston (SC); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Career growth

Tuition assistance

Paid federal holidays

Healthcare plans

Pet insurance

401K

Job summary

Resource Management Concepts, Inc. is seeking an Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services supporting mission applications and secure information sharing in Charleston, SC.

This role combines federation, directory integration, provisioning, and application development within government environments. The candidate will work with software developers, infrastructure engineers, and security personnel to ensure

Qualifications

• Active TS/SCI clearance with ability to obtain CI polygraph.
• 10+ years of directly relevant experience in IC/DoD environments.
• Bachelor’s degree in Cybersecurity, Computer/Elec/Electronics Engineering, or Math with CS concentration, or equivalent.
• Experience implementing, integrating, or operating enterprise IAM services.

Responsibilities

• Implement and integrate enterprise ICAM services with mission applications, directories, and identity sources.
• Develop and maintain APIs and service integrations for identity information and access control.
• Configure and troubleshoot federation, SSO, OpenID Connect, and application authentication.
• Integrate identity platforms with Active Directory, LDAP, and personnel systems.
• Automate provisioning and deprovisioning while maintaining accurate identity attributes and entitlements.
• Support migration from legacy IAM platforms to modern services without loss of functionality.
• Maintain virtual directories, identity data aggregation, synchronization, and replication.
• Collaborate with developers to resolve authentication failures and mapping issues.
• Support cross-domain federation with approved data-sharing restrictions.

Skills

TS/SCI clearance

IC IAM experience

OIDC federation

APIs development

Directory services

Troubleshooting auth

RBAC/ABAC knowledge

Security in DoD/IC envs

Identity data protection

Documentation & testing

Education

Bachelor’s in Cybersecurity / CS / Engineering / Math

Tools

PingFederate

Radiant Logic

SailPoint

Keycloak

Okta

Secret Server

Job description

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.

RMCis seeking an Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services supporting mission applications and secure information sharing. This role combines identity federation, directory integration, account provisioning, and application development within Department of Defense and Intelligence Community environments.

The engineer will work with software developers, infrastructure engineers, and security personnel to connect identity services with mission systems. Candidates should understand how authentication, identity attributes, and authorization decisions work across an enterprise and be able to troubleshoot the configurations, interfaces, and application code that support those functions.

This position is contingent on contract award and position availability. It is a full-time, on-site role at a Government facility in Charleston, SC.

What You'll Do{{:}}

• Implement and integrate enterprise ICAM services with mission applications, directories, and authoritative identity and attribute sources
• Develop and maintain Application Programming Interfaces (APIs) and service integrations that provide identity information and support access control decisions
• Configure and troubleshoot identity federation, single sign-on, and application authentication using OpenID Connect (OIDC) and other applicable standards
• Integrate identity platforms with Active Directory, enterprise directories, and personnel and training systems
• Automate account and group provisioning, updates, and deprovisioning while maintaining accurate identity attributes and access entitlements
• Support migration from legacy identity platforms to modern services, preserving configurations, identity mappings, provisioning behavior, and application functionality
• Implement and maintain virtual directory services, identity data aggregation, synchronization, and replication
• Work with application developers to resolve authentication failures, token and claim mapping issues, and authorization inconsistencies
• Support identity federation across networks and mission partners, applying approved data-sharing restrictions and cross-domain transfer processes
• Protect identity data through encryption, appropriate access controls, and secure service communications
• Support identity services in environments with intermittent or limited connectivity, including approved caching and synchronization of identity and authorization information
• Use automation and configuration management to establish consistent identity service deployments across environments
• Maintain integration documentation, configuration baselines, test procedures, and operational guidance

Requirements

• Active TS/SCI clearance with the ability to obtain a CI polygraph
• Prior Intelligence Community support experience
• Bachelor's degree in Cybersecurity, Computer/Electrical/Electronics Engineering, or Mathematics with a computer science concentration, or equivalent
• 10+ years of directly relevant experience
• Experience implementing, integrating, or operating enterprise IAM services
• Hands-on experience with federation, OIDC, and application integration, including claims, attributes, and access mappings
• Experience with Active Directory, LDAP, identity lifecycles, provisioning, synchronization, and entitlements
• Experience developing APIs, scripts, or integrations for identity services
• Ability to troubleshoot authentication and authorization across applications, identity providers, directories, and networks
• Knowledge of role- and attribute-based access controls, least privilege, and identity data protection
• Experience documenting, testing, and managing changes in secure environments
• Ability to meet applicable cybersecurity workforce qualifications
• Availability to work full-time onsite at a Government facility

Desired Skills

Master's degree in a field listed above or equivalent.

• CompTIA Security+ certification
• Experience with PingFederate, Radiant Logic, SailPoint, Keycloak, Okta, or Secret Server
• Identity-provider migrations, including application code, claims, tokens, and identity mappings
• Directory modernization, virtual directories, Microsoft Identity Manager, and legacy provisioning migrations
• SAML, OAuth 2.0, and SCIM
• Go, Python, Ansible, or similar integration and automation tools
• AWS/GovCloud, Kubernetes, OpenShift, and DoD IL5 environments
• PKI, certificate-based authentication, certificate lifecycle management, and secure credentials
• Cross-domain federation or identity services in DDIL environments
• Zero Trust integration using identity attributes and policy-based access decisions

Benefits

At RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees.

RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.

Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements.