Senior ICAM Engineer with Security Clearance

Capgemini Government Solutions; San Antonio (TX); On-site; USD 110,000 - 130,000; Full time

Benefits offered by this job

Paid time off

Medical/dental/vision insurance

401(k)

Education assistance

Job summary

Capgemini Government Solutions seeks a Senior ICAM Engineer to design, deploy, and maintain Radiant Logic RadiantOne FID/VDS platforms across hybrid environments. You will unify diverse identity sources, create entitlement models, and support ABAC and ZTA initiatives.

Responsibilities include building real-time identity pipelines, integrating AD, Entra ID, LDAP, and databases, and ensuring secure, scalable identity governance for DoD ICAM programs.

Qualifications

• Bachelor's degree in a related technical field.
• 6+ years in ICAM with 3+ years hands-on Radiant Logic.
• Active Secret clearance required; DoD IAT Level II baseline certification.

Responsibilities

• Design, build, configure, and maintain Radiant Logic RadiantOne FID/VDS in hybrid environments.
• Develop unified identity views and entitlement models for downstream engines.
• Connect and synthesize identity data from AD, Entra ID, LDAP, databases, APIs, and flat files.
• Write advanced mapping, join logic, and real-time sync pipelines.
• Implement dynamic context feeds for PDP/PEP across identity mesh.
• Perform load balancing, caching, clustering, and performance tuning.
• Manage upgrades, backups, and security hardening.

Skills

ICAM

Radiant Logic

ABAC

ZTA

PDP/PEP

Education

Bachelor's degree in a related technical field

Tools

RadiantOne FID/VDS

PowerShell

Bash

Python

SQL

Oracle

PostgreSQL

Job description

Position Overview The Senior ICAM Engineer specializes in designing, deploying, and maintaining Master Entitlement Records (MER) and authoritative identity pipelines using the Radiant Logic RadiantOne Virtual Directory Server (VDS) / FID platform. This role is responsible for virtualizing, unifying, and correlating disparate identity, group, and access entitlement data across heterogeneous enterprise data stores, directories, databases, and cloud environments. The engineer ensures the creation of a centralized, real-time "single source of identity truth" (Master Entitlement Record) to support fine-grained access control, Attribute-Based Access Control (ABAC), Identity Governance and Administration (IGA), and Zero Trust Architecture (ZTA) initiatives. Key Responsibilities

• Design, build, configure, and maintain Radiant Logic RadiantOne FID/VDS instances across complex hybrid environments (on-premises and cloud).
• Develop, manage, and optimize unified identity views, object mapping, schema extensions, and entitlement aggregation models to support downstream authorization and governance engines.
• Connect, join, translate, and synthesize identity data from disparate sources including Active Directory, Microsoft Entra ID, LDAP directories, relational databases (SQL, Oracle), web services/APIs, and flat files.
• Write and maintain advanced mapping, join logic, cascading rules, computed attributes, and real-time synchronization pipelines using Radiant Logic native tools and custom scripting.
• Implement dynamic context and attribute feeds to power Policy Decision Points (PDP) and Policy Enforcement Points (PEP) across the enterprise identity mesh.
• Perform load balancing, context caching, indexing optimization, cluster synchronization, and performance tuning for Radiant Logic clusters to maintain low-latency response times for high-volume authentication/authorization queries.
• Manage platform upgrades, version migrations, cluster health checks, backup/disaster recovery procedures, and security hardings (STIG compliance).
• Serve as the senior technical escalation point for data synchronization failures, identity resolution edge cases, schema inconsistencies, and directory performance degradation. Required Qualifications
• Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, Systems Engineering, or a related technical discipline.
• Minimum of six (6) years of professional experience in Identity, Credential, and Access Management (ICAM), with at least three (3) years dedicated to hands‑on engineering and administration of Radiant Logic RadiantOne (FID/VDS) platforms.
• Must possess an active (Secret clearance required).
• Active IAT Level II Baseline Certification in accordance with DoD 8570.01-M / DoD 8140 (e.g., CompTIA Security+ CE, CySA+, GSEC, CCNA Security, or higher level certifications like CISSP or CASP+). Technical Expertise:
• Deep understanding of directory technologies, schema structures, and protocols: LDAP, Active Directory, Azure AD/Entra ID, SAML, OAuth, OIDC, and REST/SOAP web services.
• Practical experience designing complex joins, user unions, auto-generated attributes, and complex hierarchy transformations in Radiant Logic.
• Solid working knowledge of relational database structures and query languages (SQL Server, Oracle, PostgreSQL).
• Familiarity with scripting languages (PowerShell, Bash, Python) for operational automation and data validation.
• Exceptional analytical problem-solving skills, precision in data modeling, and the ability to articulate identity infrastructure concepts to both technical leads and program managers.
• Direct experience supporting Federal ICAM (FICAM), DoD ICAM, or enterprise Zero Trust Architecture (ZTA) implementations.
• Integration experience connecting Radiant Logic to IGA platforms (e.g., SailPoint), Access Managers (e.g., Ping, Okta, ForgeRock), or PAM solutions (e.g., CyberArk). About Capgemini Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem. The Group reported 2024 global revenues of ₠22.1 billion. Disclaimer All qualified applicants will be considered for employment based on their skills, and merit. Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process. Applicants for employment in the US must have valid work authorization that does not now and/or will not in the future require sponsorship of a visa for employment authorization in the US by Capgemini. Capgemini discloses salary range information in compliance with state and local pay transparency obligations. The disclosed range represents the lowest to highest salary we, in good faith, believe we would pay for this role at the time of this posting, although we may ultimately pay more or less than the disclosed range, and the range may be modified in the future. The disclosed range takes into account the wide range of factors that are considered in making compensation decisions including, but not limited to, geographic location, relevant education, qualifications, certifications, experience, skills, seniority, performance, sales or revenue-based metrics, and business or organizational needs. At Capgemini, it is not typical for an individual to be hired at or near the top of the range for their role. The base salary range for the tagged location is $110k - $130k. This role may be eligible for other compensation including variable compensation, bonus, or commission. Full time regular employees are eligible for paid time off, medical/dental/vision insurance, 401(k), and any other benefits to eligible employees. Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, or any other form of compensation that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company's sole discretion, consistent with the law. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)