Senior ICAM Engineer

Accelera-Solutions-Inc; Charleston, Washington (SC, District of Columbia); Sur place; USD 130 000 - 190 000; Plein temps

Résumé du poste

Accelera Solutions is seeking an Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services for mission applications and secure information sharing.

You will work with developers and security personnel to connect identity services with mission systems, troubleshoot authentication and authorization across applications, and support federation across networks with cross-domain transfer controls.

Qualifications

• Active TS/SCI clearance with the ability to obtain a CI Polygraph.
• Prior experience supporting the Intelligence Community.
• Bachelor’s degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a CS concentration.
• 10+ years of directly relevant experience.
• Professional experience implementing, integrating, or operating enterprise identity and access management services.
• Hands-on experience with identity federation, application authentication, and OIDC.
• Experience integrating applications with identity providers, including configuring claims, identity attributes, and access mappings.
• Experience with Active Directory and LDAP-based directory services.
• Understanding of account lifecycle management, group provisioning, identity synchronization, and entitlement management.
• Experience developing or modifying APIs, scripts, or application integrations supporting identity services.
• Ability to troubleshoot authentication and authorization issues across applications, identity providers, directories, and network connections.
• Understanding of RBAC and ABAC, least privilege, and protection of identity data.
• Experience documenting configurations, testing integrations, and managing changes in secure enterprise environments.
• Ability to meet applicable cybersecurity workforce qualification requirements for the assigned position.
• Ability to work on-site with the Customer. This is a full-time, on-site role at a government facility.

Responsabilités

• Develop, integrate, and maintain enterprise ICAM services for mission applications and secure information sharing.
• Configure and troubleshoot identity federation, single sign-on, and application authentication using OIDC and other standards.
• Integrate identity platforms with AD, enterprise directories, and personnel/training systems.
• Automate account provisioning, updates, and deprovisioning while preserving identity attributes and entitlements.
• Support migration from legacy identity platforms to modern services with seamless transitions.
• Implement and maintain virtual directory services, identity data aggregation, synchronization, and replication.
• Collaborate with developers to resolve authentication failures and token/claim mapping issues.
• Support identity federation across networks and mission partners with cross-domain transfer controls.
• Protect identity data through encryption and secure service communications.
• Maintain integration documentation, baselines, test procedures, and operational guidance.

Connaissances

Identity federation

Application authentication

OIDC

Active Directory

LDAP

RBAC/ABAC

Troubleshooting

API integrations

Automation

Security best practices

Formation

Bachelor’s degree in Cybersecurity/Computer/Electrical/Electronics Engineering or Mathematics with CS concentration

Outils

PingFederate

Radiant Logic

SailPoint

Keycloak

Okta

Secret Server

Active Directory

LDAP

Description du poste

This position is full time, on site in either Charleston, SC or Washington, DC metro area. Candidates must live in either of those areas as position is full time on site. This position requires the candidate have an Active Top Secret/Sensitive Compartmented Information (TS/SCI) clearance with the ability to obtain a Counterintelligence (CI) Polygraph.Accelera Solutions is seeking an Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services supporting mission applications and secure information sharing. This role combines identity federation, directory integration, account provisioning, and application development within Department of Defense and Intelligence Community environments.The engineer will work with software developers, infrastructure engineers, and security personnel to connect identity services with mission systems. Candidates should understand how authentication, identity attributes, and authorization decisions work across an enterprise and be able to troubleshoot the configurations, interfaces, and application code that support those functions.What You’ll Do:*Implement and integrate enterprise ICAM services with mission applications, directories, and authoritative identity and attribute sources.*Develop and maintain Application Programming Interfaces (APIs) and service integrations that provide identity information and support access control decisions.*Configure and troubleshoot identity federation, single sign-on, and application authentication using OpenID Connect (OIDC) and other applicable standards.*Integrate identity platforms with Active Directory, enterprise directories, and personnel and training systems.*Automate account and group provisioning, updates, and deprovisioning while maintaining accurate identity attributes and access entitlements.*Support migration from legacy identity platforms to modern services, preserving configurations, identity mappings, provisioning behavior, and application functionality.*Implement and maintain virtual directory services, identity data aggregation, synchronization, and replication.*Work with application developers to resolve authentication failures, token and claim mapping issues, and authorization inconsistencies.*Support identity federation across networks and mission partners, applying approved data-sharing restrictions and cross-domain transfer processes.*Protect identity data through encryption, appropriate access controls, and secure service communications.*Support identity services in environments with intermittent or limited connectivity, including approved caching and synchronization of identity and authorization information.*Use automation and configuration management to establish consistent identity service deployments across environments.*Maintain integration documentation, configuration baselines, test procedures, and operational guidance.Required Qualifications:*Active Top Secret/Sensitive Compartmented Information (TS/SCI) clearance with the ability to obtain a Counterintelligence (CI) Polygraph.*Prior experience supporting the Intelligence Community.*Bachelor’s degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in computer science or equivalent*10+ years of directly relevant experience*Professional experience implementing, integrating, or operating enterprise identity and access management services.*Hands-on experience with identity federation, application authentication, and OIDC.*Experience integrating applications with identity providers, including configuring claims, identity attributes, and access mappings.*Experience with Active Directory and Lightweight Directory Access Protocol (LDAP)- based directory services.*Understanding of account lifecycle management, group provisioning, identity synchronization, and entitlement management.*Experience developing or modifying APIs, scripts, or application integrations supporting identity services.*Ability to troubleshoot authentication and authorization issues across applications, identity providers, directories, and network connections.*Understanding of role-based and attribute-based access control, least privilege, and protection of identity data.*Experience documenting configurations, testing integrations, and managing changes in secure enterprise environments.*Ability to meet applicable cybersecurity workforce qualification requirements for the assigned position.*Ability to work on-site with the Customer. This is a full-time, on-site role at a government facility.Desired Qualifications:*Master’s degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in computer science or equivalent*CompTIA Security+ certification.*Identity platforms: Experience with PingFederate, Radiant Logic, SailPoint, Keycloak, Okta, or Secret Server.*Identity provider migration: Experience migrating applications from Keycloak to PingFederate or between comparable platforms, including adapting application code, claims, tokens, and identity mappings.*Directory modernization: Experience with virtual directories, Microsoft Identity Manager, directory consolidation, and migration of legacy provisioning services.*Federation standards: Experience with Security Assertion Markup Language (SAML), OAuth 2.0, and System for Cross-domain Identity Management (SCIM).*Development and automation: Experience with Go, Python, Ansible, or comparable tools for service integration and repeatable configuration.*Cloud and container platforms: Familiarity with Amazon Web Services (AWS), AWS GovCloud, Kubernetes, Red Hat OpenShift, and deployments subject to Department of Defense Impact Level 5 requirements.*Certificates and credentials: Experience with Public Key Infrastructure (PKI), certificate-based authentication, certificate lifecycle management, and secure credential handling.*Mission environments: Experience supporting identity federation across security domains or identity services under Denied, Disrupted, Intermittent, and Limited (DDIL) connectivity conditions.*Zero Trust: Experience integrating identity attributes and policy-based access decisions into application and data protection services.Accelera Solutions is an Equal Opportunity Employer/Veterans/Disabled.