Senior ICAM Federation & App Integration Architect

Leidos; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

Leidos is seeking a senior technical engineer to lead ICAM federation, application onboarding, and integration services across DoD enterprise and cloud environments. The role covers designing, configuring, testing, and sustaining identity provider, SSO, MFA, and API-based access controls with DoD/NIST-aligned standards.

You will mentor junior engineers, present architecture and tests, and drive secure enterprise integration using Okta, Ping Federate, and Microsoft Entra ID among other ICAM

Qualifications

• Active DoD Secret Clearance or higher.
• BS degree and 12+ years relevant experience.
• Experience with IdAM/ICAM delivery systems, enterprise identity providers, SSO, authentication and authorization services, federated identity management, claims engineering, access management APIs, entitlement management, and digital policy management.
• Experience with security accreditation processes and identity-related security control implementation.
• Experience supporting cloud-hosted identity services, enterprise application integration, and AWS or comparable cloud environments.
• Experience with SAML 2.0, OIDC, OAuth 2.0, FIDO2/WebAuthn, CAC/PIV, PKI, MFA, step-up authentication, and token-based access control concepts.
• Understanding of context-aware access, RBAC, ABAC, device posture, network context, and risk-based authentication principles.
• Experience integrating enterprise applications using federation protocols, APIs, claims transformation, and identity provider technologies.
• Excellent oral and written communication skills.
• TS/SCI eligible

Responsibilities

• Plan and execute ICAM federation and application onboarding activities with Agile methodologies.
• Integrate Okta, Ping Federate, Radiant Logic, Microsoft Entra ID, Keycloak, ForgeRock, SailPoint, Delinea, HashiCorp with enterprise and mission applications.
• Assess current authentication architectures, analyze options, and implement federation and onboarding solutions.
• Develop and present federation designs, claims mappings, integration artifacts, test plans, and demonstrations.
• Evaluate emerging federation and authentication technologies and guide teams in implementing SSO, MFA, API integration, and onboarding.
• Develop service design procedures and technical recommendations for integration, claims release, federation protocols, MFA, API security, deployment automation, and operational handoff.
• Ensure engineering teams deliver SSO, federation, MFA, API integration, and onboarding capabilities.
• Support integration of enterprise identity providers across cloud, mission, and hybrid environments.
• Provide technical status updates and risk assessments to stakeholders.
• Serve as technical lead for federation and onboarding activities while mentoring junior engineers.
• Prepare architecture diagrams, implementation plans, and integration briefings.
• Recognized as a trusted technical leader for ICAM federation and enterprise app integration.

Skills

Active DoD Secret Clearance

Federation & ICAM expertise

12+ years experience

Leadership & program management

Security accreditation processes

Education

BS degree

Tools

Okta

Ping Federate

Radiant Logic

Microsoft Entra ID

Keycloak

ForgeRock

SailPoint

Delinea

HashiCorp

Job description

Leidos is seeking a senior technical engineer to lead ICAM federation, application onboarding, and integration services across DoD enterprise and cloud environments. The role covers designing, configuring, testing, and sustaining identity provider, SSO, MFA, and API-based access controls with DoD/NIST-aligned standards.

You will mentor junior engineers, present architecture and tests, and drive secure enterprise integration using Okta, Ping Federate, and Microsoft Entra ID among other ICAM