Top Secret - Senior ICAM Engineer - Technician LEVEL 4

Bailey Information Technology Consultants, LLC; Chantilly (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Bailey Information Technology, LLC in Chantilly, VA, seeks a Senior ICAM Engineer (Technician Level 4) to lead modernization of ICAM components, including PEP, PIP, EMS, and RPMS, across on‑prem and cloud patterns. The role is hands‑on, involves designing, developing, testing, and integrating new capabilities.

The position requires TS/SCI clearance eligibility with polygraph timing, a STEM degree and 8+ years of relevant experience, and warns about a 7‑month duration.

Qualifications

• Bachelor’s degree in STEM with 8+ years’ relevant experience.
• Hands-on experience with identity, authentication, and authorization systems.
• Experience designing or integrating microservices architectures.
• Proficiency in Agile teams and iterative delivery.
• Ability to obtain Security+ within 90 days of hire.

Responsibilities

• Implement ICAM modernization designs for PEP/PIP/EMS and RPMS components.
• Develop and integrate microservices for identity, attributes, authorization, and policy distribution.
• Translate high-level designs into detailed engineering tasks and interfaces.
• Collaborate with DevOps on CI/CD, containers, and Kubernetes deployment.
• Mentor junior engineers and promote secure coding and ICAM best practices.
• Contribute to engineering documentation and design specifications.

Skills

ICAM/security integration

Distributed systems

Agile delivery

Education

Bachelor’s degree in STEM

Tools

Kubernetes/OpenShift

AWS

Linux

GitOps tools

Job description

Top Secret - Senior ICAM Engineer - Technician LEVEL 4

• Chantilly, VA
• Information Technology

Bailey Information Technology, LLC
Position: Senior ICAM Engineer - Technician Level 4
(PDP, PEP/PIP, EMS & RPMS Modernization)

Location: Chantilly, VA

Clearance: TS, SCI/Poly eligible

Certifications: Ability to obtain Security+ within 90 days of hire.

Job Description :

GEOAxIS is currently modernizing legacy ICAM components including Policy Enforcement Points (PEP), Policy Information Points (PIP), Enterprise Management Services (EMS), and Resource & Policy Management Services (RPMS) using on-prem and cloud-native patterns, modern vendor open-source technologies, improved deployment automation, and microservices-based designs.

The Senior ICAM Engineer (Technician Level 4) plays a critical role in implementing the Architect’s designs and fulfilling the Technical Lead’s engineering direction. This position will design, develop, integrate, test, and troubleshoot modernized ICAM capabilities, serving as a senior hands‑on contributor across multiple modernization workstreams. This position is a short‑term assignment with an expected duration of 7 months.

Responsibilities:

• Implement ICAM modernization designs for PEP/PIP/EMS and RPMS components, ensuring alignment with architectural patterns and modernization goals. Transition from the legacy PDP to JBlocks.
• Develop and integrate microservices supporting identity, attributes, authorization, resource registration, and policy distribution.
• Work closely with the Architect to translate high-level designs into detailed engineering tasks, technical artifacts, and system interfaces.
• Support the Technical Lead by providing technical input during Program Increment (PI) planning, backlog refinement, work estimation, and risk identification.
• Develop new PEP/PIP patterns including enforcement endpoints, policy decision integrations, and attribute retrieval mechanisms.
• Enhance EMS and RPMS services by implementing automation for resource/role lifecycle management, attribute orchestration, and policy ingestion workflows.
• Collaborate closely with Development and Operations (DevOps) engineers on Continuous Integration and Continuous Delivery (CI/CD), containerization, infrastructure automation, and deployment to Kubernetes or the governments currently installed application platform.
• Troubleshoot complex identity, authentication, authorization, and policy-related issues across legacy and modernized components.
• Contribute to engineering documentation including design specifications, data flow diagrams, configuration standards, and interface definitions.
• Ensure modernization activities reduce operational overhead and improve system reliability, maintainability, and observability.
• Participate in integration testing, operational readiness testing, and deployment validation across multiple environments and security domains.
• Mentor junior engineers and promote best practices in secure coding, microservices development, and ICAM integration.

Requirements/Qualifications:

• Bachelor’s degree in a Science, Technology, Engineering, and Mathematics (STEM) field and 8+ years of relevant experience, or equivalent experience.
• Hands‑on experience developing or integrating systems related to identity, authentication, authorization, or enterprise security.
• Experience implementing distributed systems or microservices architectures on modern platforms.
• Experience supporting Agile teams and contributing to iterative delivery of new capabilities.
• Ability to interpret architectural guidance and convert designs into high‑quality, maintainable engineering solutions.
• Ability to obtain Security+ within 90 days of hire.

Preferred Qualifications:

• Experience with Kubernetes or OpenShift for deployment and container orchestration.
• Programming experience with Java and/or Python.
• Familiarity with GitOps tools.
• Experience with Amazon Web Services (AWS), Linux, or containerization technologies.
• Knowledge of identity and access standards: X.509, SAML, OAuth2, OIDC, LDAP.
• Experience with Oracle products or similar ICAM vendor technologies.
• Experience implementing ABAC/RBAC models, policy-based access controls, and ZT aligned authorization patterns.
• Experience supporting Intelligence Community (IC) or Department of War (DoW) systems, particularly authorization and identity-centric services.

Clearance Requirements*

Requires an active Top Secret security clearance upon hire and must meet SCI eligibility. Must be willing and able to obtain a polygraph within the customer’s timeline after hire. Applicants selected will be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information. Due to the nature of work performed within our facilities, U.S. citizenship is required.