RM
22 icam engineer identity credential and access management jobs found
Refine Search
Security Clearance
State
City
GD
NP
CI
Le
AV
Le
Le
ST
AI
Tw
No
No
PI
Le
Le
RT
WI
This position is 100% Onsite. This position is in Arlington, VA, with occasional/situational travel.
Certificate
N/A
Location:
4800 Mark Center Drive, Alexandria, VA 22311
Schedule
100% onsite
Clearance
US Citizens with DOD Top Secret
Responsibilities
Qualifications
- Engineering & Deployment: Engineer, deploy, secure, and maintain complex, mission-critical identity systems-specifically ForgeRock IdP/ICAM platforms-across Linux-based environments to meet DoD, DISA, and federal standards.
- Integration & Federation: Integrate enterprise applications and directories (LDAP, Active Directory) with ICAM platforms using robust federation protocols (SAML, OAuth2, APIs) across cross-domain workflows and secure enclaves.
- Lifecycle & Access Control: Manage the complete identity and credentiallifecycle (issuing, renewing, revoking, and automating workflows) to enforce strict Zero Trust access controls.
- Security & Compliance: Conduct system hardening, log analysis, and vulnerability management to support compliance with the Risk Management Framework (RMF) and participate in architectural and risk reviews.
- Operations & Troubleshooting: Diagnose and resolve escalated ICAM and ForgeRock issues within defined SLAs, conducting root cause analysis, performance tuning, and active monitoring.
- Documentation & Metrics: Create and version-control key engineering artifacts (CONOPS, SOPs, API documentation, and workflow diagrams) while maintaining ICAM performance metrics and dashboards.
Basic Qualifications
- BS in Computer Science, IT, or related discipline and 8 years of systems engineering experience (or equivalent experience in lieu of degree).
- Active TS clearance with SCI eligibility
- Ability to obtain and maintain a CI Poly and Special Program Access.
- IAT Level II certification or higher (e.g., Security CE, CySA , SSCP, CISSP).
- Hands on experience with federation technologies (SAML, OAuth2) and ZeroTrust identity principles.
- Experience engineering or administering the ForgeRock platform (AM, IDM, DS).
- Strong understanding of ICAM concepts, identity lifecycle management, and enterprise access controls.
- Experience with Windows and Linux systems administration, shell scripting, and troubleshooting.
Preferred Qualifications
- Experience supporting DISA or DoD mission partners.
- Active TS/SCI with CI Poly preferred.
- Experience with any of the following:
- JISG Access Controls
- AWS cloud engineering, IAM, and security services
- Ansible playbooks and automated configuration management
- CI/CD pipelines (GitLab, Jenkins, etc.)
If you are interested, please send an email to hr@rmantras.com">HR@rmantras.com
Job ID
icam-engineer-identity-credential-and-access-management|loc1
About RMantra