Zero-Trust ICAM Specialist (Okta/CyberArk)

CACI; United States; On-site; USD 75,000 - 158,000; Full time

Job summary

CACI is seeking an ICAM Specialist to support a DoD program and work within a Zero Trust framework. You’ll manage identity lifecycles, administer OKTA, and secure remote access for a large enterprise. Travel to Scott Air Force Base quarterly is required.

The role emphasizes IAM governance, PAM, MFA implementation, and collaboration with cybersecurity architects to advance Zero Trust adoption across systems.

Qualifications

• Active Secret or Top Secret clearance.
• 3–5 years IAM experience.
• Hands-on with enterprise IAM; OKTA preferred.
• Understanding of PAM concepts and tools.
• Experience implementing and administering MFA solutions.
• DoD 8140 Interim Education Options.
• DoD 8140.03M DCWF Basic tier – one of CC, GDSA, or GISF.

Responsibilities

• Manage full identity lifecycle operations: provisioning, modifying, and de-provisioning user access.
• Administer OKTA for enterprise IAM, including policies, workflows, and integrations.
• Manage privileged credentials and vaulting via CyberArk PAM.
• Implement and maintain MFA across systems and platforms.
• Conduct monthly privileged access and DCWF compliance audits; deliver executive-ready reporting.
• Operate and support secure remote access using Palo Alto Secure Browser and Zscaler Private Access.
• Build and maintain access control matrices, identity governance documentation, and SOPs.
• Support the Cybersecurity Architect with identity architecture planning and Zero Trust adoption.

Skills

IAM experience

Zero Trust

Identity lifecycle

MFA implementation

Education

Bachelor's degree in Computer Science or related field

Tools

OKTA

CyberArk PAM

Zscaler Private Access

Palo Alto Secure Browser

Job description

CACI is seeking an ICAM Specialist to support a DoD program and work within a Zero Trust framework. You’ll manage identity lifecycles, administer OKTA, and secure remote access for a large enterprise. Travel to Scott Air Force Base quarterly is required.

The role emphasizes IAM governance, PAM, MFA implementation, and collaboration with cybersecurity architects to advance Zero Trust adoption across systems.