Senior ICAM Engineer

acuCyber; Charleston (SC); On-site; USD 120,000 - 160,000; Full time

Job summary

acuCyber seeks an Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services for mission applications and secure information sharing. This on-site role supports DoD/Intelligence Community environments in Charleston, SC or NCR.

You will implement ICAM services, APIs, and integrations, configure federation and SSO, and ensure accurate identity attributes and access entitlements across systems.

Qualifications

• Bachelor's degree in CS or related field.
• Strong experience with ICAM concepts and IAM architectures.
• Ability to troubleshoot authentication across systems.

Responsibilities

• Implement and integrate enterprise ICAM services with mission applications, directories, and identity sources.
• Develop and maintain APIs and integrations for identity data and access decisions.
• Configure and troubleshoot identity federation, SSO, and application authentication (OIDC and standards).
• Integrate identity platforms with Active Directory and enterprise directories.
• Automate account provisioning, updates, and deprovisioning while preserving attributes and entitlements.
• Support migration from legacy identities to modern services with preserved configs and mappings.
• Maintain virtual directory services, data aggregation, and replication.
• Collaborate with developers to resolve authentication failures and mapping issues.
• Support federation across networks and mission partners with data-sharing controls.

Skills

ICAM engineering

OpenID Connect

SSO

Active Directory

API development

Identity federation

Authentication troubleshooting

Education

Bachelor's degree in CS or related field

Tools

LDAP/Directory services

ADFS

Okta

Job description

acuCyber is seeking an Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services supporting mission applications and secure information sharing. This role combines identity federation, directory integration, account provisioning, and application development within Department of Defense and Intelligence Community environments.

The engineer will work with software developers, infrastructure engineers, and security personnel to connect identity services with mission systems. Candidates should understand how authentication, identity attributes, and authorization decisions work across an enterprise and be able to troubleshoot the configurations, interfaces, and application code that support those functions.

This is a full-time, on-site role at a Government facility in Charleston, SC or the National Capital Region (NCR).

What You'll Do:

• Implement and integrate enterprise ICAM services with mission applications, directories, and authoritative identity and attribute sources.
• Develop and maintain Application Programming Interfaces (APIs) and service integrations that provide identity information and support access control decisions.
• Configure and troubleshoot identity federation, single sign-on, and application authentication using OpenID Connect (OIDC) and other applicable standards.
• Integrate identity platforms with Active Directory, enterprise directories, and personnel and training systems.
• Automate account and group provisioning, updates, and deprovisioning while maintaining accurate identity attributes and access entitlements.
• Support migration from legacy identity platforms to modern services, preserving configurations, identity mappings, provisioning behavior, and application functionality.
• Implement and maintain virtual directory services, identity data aggregation, synchronization, and replication.
• Work with application developers to resolve authentication failures, token and claim mapping issues, and authorization inconsistencies.
• Support identity federation across networks and mission partners, applying approved data-sharing restrictions and cross-domain transfer processes.
• Protect identity data through encryption, appropriate access controls, and secure service communications.
• Support identity services in environments with intermittent or limited connectivity, including approved caching and synchronization of identity and authorization information.
• Use automation and configuration management to establish consistent identity service deployments across environments.
• Maintain integration documentation, configuration baselines, test procedures, and operational guidance.