Senior ICAM Identity Engineer - DOD MP-ICAM Expert

Peraton; Reston (VA); On-site; USD 135,000 - 216,000; Full time

Job summary

Peraton is seeking an Advisor-level Identity Engineer to support AFRH's DOD MP-ICAM integration, CAC/PIV and federation, and directory synchronization. The role requires strong ICAM expertise, PKI operations, and active DoD/Federal identity program experience.

Responsibilities include provisioning workflows, identity controls collaboration with Cyber/ATO/MDIO, and authoring architecture artifacts for Government transmission.

Qualifications

• Advisor-level identity / ICAM engineering with DOD or Federal experience
• CAC/PIV, SAML, OAuth, OIDC, and Active Directory fluency
• PKI operations and certificate lifecycle management
• Experience with DOD MP-ICAM or an equivalent Federal identity platform
• Federal facility access / background investigation clearance
• US citizenship required
• Signed NDA by Day 1
• At least MP-ICAM or equivalent Federal identity integration
• CISSP, Security+, or equivalent
• DoD 8570 IAT-II/III
• SailPoint, Okta, or Ping identity-platform certification

Responsibilities

• Design and implement AFRH's identity integration with DOD MP-ICAM
• Configure CAC/PIV authentication, SAML/OAuth federation, and directory synchronization
• Partner with Cyber/ATO/MDIO on identity controls for the ATO package
• Support provisioning, deprovisioning, and privileged-access workflows
• Author identity architecture artifacts and transmit to Government

Skills

ICAM engineering

CAC/PIV

SAML/OAuth

Active Directory

PKI operations

DOD MP-ICAM

Education

Bachelor's + 8 yrs

Master's + 6 yrs

PhD + 3 yrs

Associate's + 10 yrs

12 yrs exp without degree

Tools

SailPoint

Okta

Ping Identity

Job description

Peraton is seeking an Advisor-level Identity Engineer to support AFRH's DOD MP-ICAM integration, CAC/PIV and federation, and directory synchronization. The role requires strong ICAM expertise, PKI operations, and active DoD/Federal identity program experience.

Responsibilities include provisioning workflows, identity controls collaboration with Cyber/ATO/MDIO, and authoring architecture artifacts for Government transmission.