Senior ICAM Engineer

Resource Management Concepts, Inc.; South Carolina; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

401K package

Paid vacation with 11 federal holidays

Tuition assistance

Pet insurance

Job summary

Resource Management Concepts, Inc. (RMC) seeks an Identity, Credential, and Access Management Engineer to develop and maintain enterprise identity services supporting mission applications in DoD/IC environments.

You will integrate federation, APIs, and directory services, while ensuring proper authentication and access control. You’ll work with developers and security staffs to resolve identity issues, migrate legacy IAM, and ensure secure service communications, with on-site duties at a

Qualifications

• 10+ years of directly relevant experience.
• Experience implementing, integrating, or operating enterprise IAM services.
• Hands-on experience with federation, OIDC, and application integration.
• Experience with Active Directory, LDAP, provisioning, synchronization, and entitlements.
• Ability to troubleshoot authentication and authorization across applications and networks.
• Ability to meet applicable cybersecurity workforce qualifications.
• Availability to work full-time onsite at a Government facility.

Responsibilities

• Implement and integrate enterprise ICAM services with mission applications, directories, and identity sources.
• Develop and maintain APIs and service integrations for identity information and access control.
• Configure authentication using OpenID Connect and related standards; troubleshoot failures.
• Integrate identity platforms with AD, directories, and personnel systems.
• Automate provisioning, updates, and deprovisioning while preserving attributes and entitlements.
• Support migration from legacy to modern IAM platforms while preserving configurations.
• Maintain virtual directory services, data aggregation, synchronization, and replication.
• Work with developers to resolve authentication and authorization issues across systems.
• Support federation across networks and partners with data-sharing restrictions.
• Protect identity data via encryption and secure communications; manage caching where needed.
• Document configurations, baselines, tests, and operational guidance.

Skills

IAM engineering

Identity federation

OIDC

APIs

Active Directory

LDAP

Troubleshooting auth

Cross-domain federation

Zero Trust

Education

Bachelor's degree in Cybersecurity, Computer/Electrical/Electronics Engineering, or Mathematics with a CS concentration

Master's degree (preferred)

Tools

PingFederate

Radiant Logic

SailPoint

Keycloak

Okta

Secret Server

Job description

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.

RMCis seeking an Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services supporting mission applications and secure information sharing. This role combines identity federation, directory integration, account provisioning, and application development within Department of Defense and Intelligence Community environments.

The engineer will work with software developers, infrastructure engineers, and security personnel to connect identity services with mission systems. Candidates should understand how authentication, identity attributes, and authorization decisions work across an enterprise and be able to troubleshoot the configurations, interfaces, and application code that support those functions.

This position is contingent on contract award and position availability. It is a full-time, on-site role at a Government facility in Charleston, SC.

What You’ll Do:

• Implement and integrate enterprise ICAM services with mission applications, directories, and authoritative identity and attribute sources.
• Develop and maintain Application Programming Interfaces (APIs) and service integrations that provide identity information and support access control decisions.
• Configure and troubleshoot identity federation, single sign-on, and application authentication using OpenID Connect (OIDC) and other applicable standards.
• Integrate identity platforms with Active Directory, enterprise directories, and personnel and training systems.
• Automate account and group provisioning, updates, and deprovisioning while maintaining accurate identity attributes and access entitlements.
• Support migration from legacy identity platforms to modern services, preserving configurations, identity mappings, provisioning behavior, and application functionality.
• Implement and maintain virtual directory services, identity data aggregation, synchronization, and replication.
• Work with application developers to resolve authentication failures, token and claim mapping issues, and authorization inconsistencies.
• Support identity federation across networks and mission partners, applying approved data-sharing restrictions and cross-domain transfer processes.
• Protect identity data through encryption, appropriate access controls, and secure service communications.
• Support identity services in environments with intermittent or limited connectivity, including approved caching and synchronization of identity and authorization information.
• Use automation and configuration management to establish consistent identity service deployments across environments.
• Maintain integration documentation, configuration baselines, test procedures, and operational guidance.

• Active TS/SCI clearance with the ability to obtain a CI polygraph.
• Prior Intelligence Community support experience.
• Bachelor’s degree in Cybersecurity, Computer/Electrical/Electronics Engineering, or Mathematics with a computer science concentration, or equivalent.
• 10+ years of directly relevant experience.
• Experience implementing, integrating, or operating enterprise IAM services.
• Hands‑on experience with federation, OIDC, and application integration, including claims, attributes, and access mappings.
• Experience with Active Directory, LDAP, identity lifecycles, provisioning, synchronization, and entitlements.
• Experience developing APIs, scripts, or integrations for identity services.
• Ability to troubleshoot authentication and authorization across applications, identity providers, directories, and networks.
• Knowledge of role- and attribute-based access controls, least privilege, and identity data protection.
• Experience documenting, testing, and managing changes in secure environments.
• Ability to meet applicable cybersecurity workforce qualifications.
• Availability to work full-time onsite at a Government facility.

Desired Skills

Master’s degree in a field listed above or equivalent.

• CompTIA Security+ certification.
• Experience with PingFederate, Radiant Logic, SailPoint, Keycloak, Okta, or Secret Server.
• Identity-provider migrations, including application code, claims, tokens, and identity mappings.
• Directory modernization, virtual directories, Microsoft Identity Manager, and legacy provisioning migrations.
• SAML, OAuth 2.0, and SCIM.
• Go, Python, Ansible, or similar integration and automation tools.
• AWS/GovCloud, Kubernetes, OpenShift, and DoD IL5 environments.
• PKI, certificate-based authentication, certificate lifecycle management, and secure credentials.
• Cross-domain federation or identity services in DDIL environments.
• Zero Trust integration using identity attributes and policy-based access decisions.

At RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees.

RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.

Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements.