Senior ICAM Engineer: Identity, Access & ForgeRock Expert

RMantra Solutions; Alexandria, Northern (VA, KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

RMantra Solutions is seeking an ICAM Engineer to deploy, secure, and maintain ForgeRock ICAM platforms in a 100% onsite role in Arlington, VA. The engineer will integrate LDAP/Active Directory with ICAM, implement federation via SAML/OAuth2, and manage the complete identity lifecycle.

The role requires TS clearance with SCI eligibility, DoD experience, and strong Linux/Windows administration and scripting. Expect collaboration across security, operations, and engineering teams.

Qualifications

• BS in Computer Science, IT, or related discipline and 8+ years of systems engineering experience (or equivalent).
• Active TS clearance with SCI eligibility.
• Ability to obtain and maintain a CI Poly and Special Program Access.
• IAT Level II certification or higher (e.g., Security+ CE, CySA+, SSCP, CISSP).
• Hands on experience with federation technologies (SAML, OAuth2) and ZeroTrust identity principles.
• Experience engineering or administering the ForgeRock platform (AM, IDM, DS).
• Strong understanding of ICAM concepts, identity lifecycle management, and enterprise access controls.
• Experience with Windows and Linux systems administration, shell scripting, and troubleshooting.

Responsibilities

• Engineer, deploy, secure, and maintain ForgeRock ICAM platforms across Linux environments to meet DoD, DISA, and federal standards.
• Integrate enterprise applications and directories (LDAP, Active Directory) with ICAM platforms using federation protocols (SAML, OAuth2) across cross-domain workflows.
• Manage the complete identity and credential lifecycle (issuing, renewing, revoking, automation) to enforce strict Zero Trust controls.
• Conduct system hardening, log analysis, and vulnerability management to support RMF compliance and risk reviews.
• Diagnose and resolve ICAM/ForgeRock issues within SLAs, perform root-cause analysis and performance tuning.
• Create and version-control engineering artifacts (CONOPS, SOPs, API docs, workflow diagrams) and maintain ICAM metrics dashboards.

Skills

ForgeRock ICAM

SAML

OAuth2

Zero Trust

Linux

Windows

Shell scripting

IAM

Education

BS in Computer Science/IT or related

Tools

ForgeRock AM/IDM/DS

LDAP

Active Directory

GitLab

Jenkins

Job description

RMantra Solutions is seeking an ICAM Engineer to deploy, secure, and maintain ForgeRock ICAM platforms in a 100% onsite role in Arlington, VA. The engineer will integrate LDAP/Active Directory with ICAM, implement federation via SAML/OAuth2, and manage the complete identity lifecycle.

The role requires TS clearance with SCI eligibility, DoD experience, and strong Linux/Windows administration and scripting. Expect collaboration across security, operations, and engineering teams.