Senior Identity, Credential, and Access Management (ICAM) Security Engineer

Ampcus Inc; Washington (District of Columbia); On-site; USD 100,000 - 130,000; Full time

Job summary

A technology solutions company is seeking a Senior Identity, Credential, and Access Management (ICAM) Security Engineer in Washington, DC. The role involves managing enterprise ICAM solutions and ensuring compliance with federal identity requirements. Candidates should have over 5 years of experience and certifications such as CISSP. This position offers growth in a collaborative environment focused on security and identity governance.

Qualifications

• 5+ years of experience performing ICAM functions.
• Ability to design and implement MFA methods.
• Familiarity with OMB M-22-09 identity strategies.

Responsibilities

• Support deployment of enterprise-wide ICAM solutions.
• Implement multifactor authentication solutions.
• Plan and design phishing-resistant authentication methods.
• Conduct functional security testing.
• Develop reports for technical and executive audiences.

Skills

Identity management solutions

Multifactor authentication (MFA)

Identity governance

Cloud security policies

Scenario-based security testing

Education

At least five years of relevant experience

Tools

Azure AD

Okta

AWS

Job description

Job Title

Senior Identity, Credential, and Access Management (ICAM) Security Engineer

Location

Washington, DC

Responsibilities

• Support the deployment and management of enterprise-wide ICAM solutions and services.
• Ensure the Board meets Office of Management and Budget and other federal identity requirements.
• Provide technical expertise related to identity, authentication, authorization, credentialing, device signals, analytics, and identity management solutions by establishing a master user record (MUR) in support of the complete user identity lifecycle.
• Implement enterprise-wide identity providers (IdP) supporting multifactor authentication (MFA) solutions.
• Implement device-level signals alongside identity information about authenticated users.
• Incorporate identity governance solutions with enterprise data governance solutions at the Board that properly define roles, attributes, and tagging features.
• Plan, design, test, and implement phishing-resistant multifactor authentication methods for enterprise platforms on the cloud, as well as for those hosted on-premises.
• Ensure credential solutions and/or authenticators meet the intent of HSPD-12 and align to NIST guidelines and government-wide ICAM requirements.
• Strengthen policies, governance, and best practices related to cloud identities, with a focus on both security and user experience.
• Plan, implement, and support identity governance and administration solutions that provide master user records, privileged access management, access management, unifying validations, identity analytics, and integrations with enterprise applications.
• Conduct scenario-based and functional security testing during authenticated and unauthenticated testing.
• Develop comprehensive reports and presentations for both technical and executive audiences.

Education

• At least five years of experience performing the functions associated with this category.

Experience

• Experience designing, deploying, and supporting enterprise ICAM architectures for the federal government that meet zero-trust mandates.
• Experience planning, designing, and implementing multifactor authentication methods (e.g., FIDO2, Windows Hello for Business, Azure Authenticator, and Okta) both for enterprise platforms on the cloud as well as for on-premises custom applications.
• Experience planning, deploying, and operating an identity governance and administration solutions that provide master user records, privileged access management (PAM), access management, unifying validations, identity analytics, and integrations with enterprise applications.
• Familiarity with identity strategies that meet OMB M-22-09 requirements.
• Knowledge of policies and best practices for cloud group and identity management within Azure AD, Okta, and AWS, including integrations for containers, applications, and enterprise products.

Certification

• Certified Information Systems Security Professional (CISSP)
• GIAC Enterprise Vulnerability Assessor (GEVA)
• Equivalent

Equal Opportunity

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.