Senior ICAM Engineer

acuCyber; Reston (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

acuCyber is seeking an Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services supporting mission applications and secure information sharing. This role combines identity federation, directory integration, account provisioning, and application development within Department of Defense and Intelligence Community environments.

The engineer will work with software developers, infrastructure engineers, and security personnel to

Responsibilities

• Implement and integrate enterprise ICAM services with mission applications, directories, and authoritative identity and attribute sources.
• Develop and maintain APIs and service integrations that provide identity information and support access control decisions.
• Configure and troubleshoot identity federation, single sign-on, and application authentication using OpenID Connect (OIDC) and other applicable standards.
• Integrate identity platforms with Active Directory, enterprise directories, and personnel and training systems.
• Automate account and group provisioning, updates, and deprovisioning while maintaining accurate identity attributes and access entitlements.
• Support migration from legacy identity platforms to modern services, preserving configurations, identity mappings, provisioning behavior, and application functionality.
• Implement and maintain virtual directory services, identity data aggregation, synchronization, and replication.
• Work with application developers to resolve authentication failures, token and claim mapping issues, and authorization inconsistencies.
• Support identity federation across networks and mission partners, applying approved data-sharing restrictions and cross-domain transfer processes.
• Protect identity data through encryption, appropriate access controls, and secure service communications.
• Support identity services in environments with intermittent or limited connectivity, including approved caching and synchronization of identity and authorization information.
• Use automation and configuration management to establish consistent identity service deployments across environments.
• Maintain integration documentation, configuration baselines, test procedures, and operational guidance.

Job description

acuCyber is seeking an Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services supporting mission applications and secure information sharing. This role combines identity federation, directory integration, account provisioning, and application development within Department of Defense and Intelligence Community environments.

The engineer will work with software developers, infrastructure engineers, and security personnel to connect identity services with mission systems. Candidates should understand how authentication, identity attributes, and authorization decisions work across an enterprise and be able to troubleshoot the configurations, interfaces, and application code that support those functions.

This is a full-time, on-site role at a Government facility in Charleston, SC or the National Capital Region (NCR).

What You’ll Do:

• Implement and integrate enterprise ICAM services with mission applications, directories, and authoritative identity and attribute sources.
• Develop and maintain Application Programming Interfaces (APIs) and service integrations that provide identity information and support access control decisions.
• Configure and troubleshoot identity federation, single sign-on, and application authentication using OpenID Connect (OIDC) and other applicable standards.
• Integrate identity platforms with Active Directory, enterprise directories, and personnel and training systems.
• Automate account and group provisioning, updates, and deprovisioning while maintaining accurate identity attributes and access entitlements.
• Support migration from legacy identity platforms to modern services, preserving configurations, identity mappings, provisioning behavior, and application functionality.
• Implement and maintain virtual directory services, identity data aggregation, synchronization, and replication.
• Work with application developers to resolve authentication failures, token and claim mapping issues, and authorization inconsistencies.
• Support identity federation across networks and mission partners, applying approved data-sharing restrictions and cross-domain transfer processes.
• Protect identity data through encryption, appropriate access controls, and secure service communications.
• Support identity services in environments with intermittent or limited connectivity, including approved caching and synchronization of identity and authorization information.
• Use automation and configuration management to establish consistent identity service deployments across environments.
• Maintain integration documentation, configuration baselines, test procedures, and operational guidance.