Zero-Trust IAM Engineer (ICAM)

Booz Allen Hamilton

San Diego (CA)

On-site

USD 87,000 - 198,000

Full time

14 days+

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

Booz Allen Hamilton is seeking an ICAM Engineer to advance identity and access management for large-scale projects. You will analyze the identity lifecycle, define access requirements, and implement enterprise IAM solutions from SSO to PAM.

The role requires hands-on experience with Active Directory/LDAP, MFA, cloud IAM (Azure/AWS), and PKI/PIV practices, plus the ability to translate security findings into actionable controls. A Secret clearance is preferred.

Qualifications

3+ years in ICAM, security operations, or identity governance.
3+ years administering directory services (Active Directory or LDAP).
3+ years with cybersecurity administration, including identity lifecycle management.
MFA solutions (Okta, Duo, Auth0) and Privileged Access Management (CyberArk or Delinea).
IAM solutions in cloud environments (Azure or AWS).
Knowledge of PKI and PIV standards and identity security best practices.
Knowledge of identity-focused cybersecurity principles and controls.
Ability to analyze technical documentation and apply security findings.
Secret clearance required.

Responsibilities

Support large-scale IAM projects for government clients.
Analyze the identity lifecycle, articulate access requirements, and define enterprise identity records.
Design, deploy, and support IAM systems from single sign-on to privileged access management.
Implement enterprise-class IAM solutions and help stop adversaries.
Collaborate with security teams to ensure compliance with policy and best practices.