Senior ICAM Engineer: Zero Trust & Federation Lead

Leidos LLC; Fort Meade (MD); On-site; USD 131,000 - 237,000; Full time

Job summary

Leidos is hiring for an ICAM engineering leader to plan and execute integration activities across senior leadership, customers, and operations teams. You will configure and sustain platforms like Okta, Ping Federate, SailPoint, and Keycloak, while advancing Zero Trust and FICAM-aligned architectures.

You will drive onboarding of diverse applications, troubleshoot authentication and authorization challenges, and guide teams in DevSecOps, IAM governance, and security controls across cloud,

Qualifications

• BS degree required; 12+ years relevant experience or equivalent.
• Hands-on experience with IdAM/ICAM delivery systems, authentication, authorization, and identity governance.
• Experience integrating and troubleshooting enterprise identity providers and federation services.
• Proficient in SAML 2.0, OIDC, OAuth 2.0, SCIM, REST APIs, PKI, MFA, and token-based authentication.

Responsibilities

• Plan and execute ICAM engineering and integration activities using Agile methodologies.
• Lead configuration, integration, troubleshooting, and sustainment of ICAM platforms.
• Onboard legacy, cloud-native, SaaS, mission, and coalition applications into enterprise ICAM services.
• Troubleshoot federation, authentication, claims mapping, token transformation, and access control issues.

Skills

Leadership

Agile

Communication

Problem solving

Mentoring

Education

BS degree

Tools

Okta

Ping Federate

SailPoint

Delinea

Radiant Logic

HashiCorp

Keycloak

Microsoft Entra ID

CAC/PIV, MFA tooling

Job description

Leidos is hiring for an ICAM engineering leader to plan and execute integration activities across senior leadership, customers, and operations teams. You will configure and sustain platforms like Okta, Ping Federate, SailPoint, and Keycloak, while advancing Zero Trust and FICAM-aligned architectures.

You will drive onboarding of diverse applications, troubleshoot authentication and authorization challenges, and guide teams in DevSecOps, IAM governance, and security controls across cloud,