Senior ICAM Engineer

Resource Management Concepts, Inc.; Charleston (SC); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Competitive benefits

11 federal holidays

Tuition assistance

Healthcare plans

401K package

Pet insurance

Job summary

Resource Management Concepts, Inc. is seeking an Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services supporting mission applications and secure information sharing.

This role combines identity federation, directory integration, account provisioning, and application development within Department of Defense and Intelligence Community environments.

Qualifications

• Experience implementing, integrating, or operating enterprise IAM services.
• Hands-on experience with federation, OIDC, and application integration, including claims, attributes, and access mappings.
• Experience with Active Directory, LDAP, identity lifecycles, provisioning, synchronization, and entitlements.
• Ability to troubleshoot authentication and authorization across applications, identity providers, directories, and networks.

Responsibilities

• Implement and integrate enterprise ICAM services with mission applications, directories, and authoritative identity sources.
• Develop and maintain APIs and service integrations that provide identity information and support access control decisions.
• Configure and troubleshoot identity federation, single sign-on, and application authentication using OIDC and other standards.
• Integrate identity platforms with Active Directory, enterprise directories, and personnel/training systems.
• Automate account provisioning, updates, and deprovisioning while maintaining identity attributes and entitlements.
• Support migration from legacy identity platforms to modern services and preserve configurations.
• Maintain virtual directory services, identity data aggregation, synchronization, and replication.
• Collaborate with developers to resolve authentication failures and mapping issues.
• Support federation across networks and mission partners with data-sharing controls.

Skills

IAM

OIDC

SAML

AD/LDAP

APIs

Automation

Education

Bachelor’s degree in Cybersecurity or related

Master’s degree preferred

Tools

PingFederate

Radiant Logic

SailPoint

Keycloak

Okta

PKI

Job description

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.

RMCis seeking an Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services supporting mission applications and secure information sharing. This role combines identity federation, directory integration, account provisioning, and application development within Department of Defense and Intelligence Community environments.

The engineer will work with software developers, infrastructure engineers, and security personnel to connect identity services with mission systems. Candidates should understand how authentication, identity attributes, and authorization decisions work across an enterprise and be able to troubleshoot the configurations, interfaces, and application code that support those functions.

This position is contingent on contract award and position availability. It is a full-time, on-site role at a Government facility in Charleston, SC.

What You’ll Do:

• Implement and integrate enterprise ICAM services with mission applications, directories, and authoritative identity and attribute sources.
• Develop and maintain Application Programming Interfaces (APIs) and service integrations that provide identity information and support access control decisions.
• Configure and troubleshoot identity federation, single sign-on, and application authentication using OpenID Connect (OIDC) and other applicable standards.
• Integrate identity platforms with Active Directory, enterprise directories, and personnel and training systems.
• Automate account and group provisioning, updates, and deprovisioning while maintaining accurate identity attributes and access entitlements.
• Support migration from legacy identity platforms to modern services, preserving configurations, identity mappings, provisioning behavior, and application functionality.
• Implement and maintain virtual directory services, identity data aggregation, synchronization, and replication.
• Work with application developers to resolve authentication failures, token and claim mapping issues, and authorization inconsistencies.
• Support identity federation across networks and mission partners, applying approved data-sharing restrictions and cross-domain transfer processes.
• Protect identity data through encryption, appropriate access controls, and secure service communications.
• Support identity services in environments with intermittent or limited connectivity, including approved caching and synchronization of identity and authorization information.
• Use automation and configuration management to establish consistent identity service deployments across environments.
• Maintain integration documentation, configuration baselines, test procedures, and operational guidance.

• Active TS/SCI clearance with the ability to obtain a CI polygraph.
• Prior Intelligence Community support experience.
• Bachelor’s degree in Cybersecurity, Computer/Electrical/Electronics Engineering, or Mathematics with a computer science concentration, or equivalent.
• 10+ years of directly relevant experience.
• Experience implementing, integrating, or operating enterprise IAM services.
• Hands‑on experience with federation, OIDC, and application integration, including claims, attributes, and access mappings.
• Experience with Active Directory, LDAP, identity lifecycles, provisioning, synchronization, and entitlements.
• Experience developing APIs, scripts, or integrations for identity services.
• Ability to troubleshoot authentication and authorization across applications, identity providers, directories, and networks.
• Knowledge of role- and attribute-based access controls, least privilege, and identity data protection.
• Experience documenting, testing, and managing changes in secure environments.
• Ability to meet applicable cybersecurity workforce qualifications.
• Availability to work full-time onsite at a Government facility.

Desired Skills

Master’s degree in a field listed above or equivalent.

• CompTIA Security+ certification.
• Experience with PingFederate, Radiant Logic, SailPoint, Keycloak, Okta, or Secret Server.
• Identity-provider migrations, including application code, claims, tokens, and identity mappings.
• Directory modernization, virtual directories, Microsoft Identity Manager, and legacy provisioning migrations.
• SAML, OAuth 2.0, and SCIM.
• Go, Python, Ansible, or similar integration and automation tools.
• AWS/GovCloud, Kubernetes, OpenShift, and DoD IL5 environments.
• PKI, certificate-based authentication, certificate lifecycle management, and secure credentials.
• Cross-domain federation or identity services in DDIL environments.
• Zero Trust integration using identity attributes and policy-based access decisions.

At RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees.

RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.

Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements.