Senior ICAM Engineer

DAn Solutions; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

DAn Solutions, Inc. is seeking a Senior ICAM Engineer to design, integrate, and maintain enterprise identity services for secure mission applications.

The role emphasizes federation, directory services, authentication, and application integration within DoD or Intelligence Community environments. Responsibilities include API development, SSO configuration, and identity provisioning across AD/LDAP and other identity sources, with an emphasis on secure, scalable solutions in constrained

Qualifications

• Active TS/SCI clearance required with ability to obtain CI Polygraph.
• Bachelor's degree in Cybersecurity or related technical discipline; equivalent qualifications accepted.
• At least 10 years of directly relevant IC/DoD experience.
• Hands-on enterprise ICAM experience including federation, AD/LDAP.
• Experience with OIDC, identity federation and application authentication.
• Experience integrating applications with identity providers and directory services.
• Strong Active Directory and LDAP experience.
• Knowledge of account lifecycle management and entitlement management.
• Experience developing APIs, scripts, or application integrations.
• Understanding of RBAC and ABAC and Zero Trust concepts.
• Ability to meet cybersecurity workforce qualification requirements.

Responsibilities

• Implement and integrate enterprise ICAM services with mission applications and directories.
• Develop APIs and integrations for identity data and access decisions.
• Configure and troubleshoot SSO, federation, and OIDC authentication.
• Integrate identity platforms with AD, LDAP, and authoritative sources.
• Automate user provisioning, updates, and deprovisioning.
• Support migration from legacy identity platforms to modern services.
• Maintain virtual directory services and identity synchronization.
• Troubleshoot authentication failures, token claims, and authorization inconsistencies.
• Support federation across networks and mission partners.
• Apply encryption and access controls to identity data.
• Support identity services in constrained connectivity environments.
• Maintain system documentation, baselines, and test procedures.

Skills

Identity federation

OIDC

Active Directory

LDAP

APIs

SAML

RBAC/ABAC

Automation

Zero Trust

Education

Bachelor's degree in Cybersecurity / related field

Tools

PingFederate

Radiant Logic

SailPoint

Keycloak

Okta

Secret Server

AWS GovCloud

Kubernetes

OpenShift

Job description

REQUIRES AN ACTIVE/EXISTING TS/SCI WITH CI POLYGRAPH

Location: Charleston, SC or Washington, DC Metropolitan Area

Position Overview

DAn Solutions is seeking a Senior Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services supporting secure mission applications and information sharing.

The ideal candidate will have extensive experience with identity federation, directory services, authentication, authorization, and application integration within DoD or Intelligence Community environments.

Key Responsibilities

• Implement and integrate enterprise ICAM services with mission applications and directories.

• Develop APIs and integrations supporting identity data and access control decisions.

• Configure and troubleshoot single sign-on, federation, and OIDC authentication.

• Integrate identity platforms with Active Directory, LDAP, and authoritative identity sources.

• Automate user account provisioning, updates, and deprovisioning.

• Support migration from legacy identity platforms to modern identity services.

• Maintain virtual directory services and identity synchronization.

• Troubleshoot authentication failures, token claims, and authorization inconsistencies.

• Support identity federation across networks and mission partners.

• Apply encryption, access controls, and secure communications to identity data.

• Support identity services in constrained connectivity environments.

• Maintain system documentation, configuration baselines, and test procedures.

Required Qualifications

• Active TS/SCI clearance with the ability to obtain a CI Polygraph.

• Bachelor's degree in Cybersecurity, Computer Engineering, Electrical Engineering, Mathematics, or a related technical discipline, or equivalent qualifications.

• At least 10 years of directly relevant experience.

• Previous Intelligence Community experience.

• Hands-on enterprise identity and access management experience.

• Experience with OIDC, identity federation, and application authentication.

• Experience integrating applications with identity providers and directory services.

• Strong Active Directory and LDAP experience.

• Knowledge of account lifecycle management, synchronization, and entitlement management.

• Experience developing APIs, scripts, or application integrations.

• Understanding of role-based and attribute-based access control.

• Ability to meet applicable cybersecurity workforce qualification requirements.

Preferred Qualifications

• Master's degree in a related discipline.

• CompTIA Security+ certification.

• Experience with PingFederate, Radiant Logic, SailPoint, Keycloak, Okta, or Secret Server.

• Experience migrating identity providers and modernizing directory services.

• Familiarity with SAML, OAuth 2.0, and SCIM.

• Go, Python, Ansible, or comparable automation experience.

• AWS GovCloud, Kubernetes, or OpenShift experience.

• PKI, certificate management, and Zero Trust architecture knowledge.

• Experience supporting identity services in DDIL environments.

Work Location

Full-time, on-site support at a government facility in Charleston, SC or the Washington, DC Metropolitan Area.

Salary Range Disclaimer:The posted salary range represents the good-faith minimum and maximum compensation DAn Solutions expects to pay for this position. The position may be filled at different Labor Category (LCAT) levels depending on the selected candidate's qualifications and applicable contract requirements. Final compensation within the posted range will be determined based on the applicable LCAT and factors including education, relevant experience, certifications, and other required qualifications