216 icam engineer identity credential and access management jobs found

Refine Search
Refine Search
icam engineer identity credential and access management
Back to job list
Back

ICAM Engineer – Identity, Credential, and Access Management

RMantra
Apply Now
Alexandria, VA, USA
Sep 21, 2026

This position is 100% Onsite. This position is in Arlington, VA, with occasional/situational travel.

Certificate

N/A

Location:

4800 Mark Center Drive, Alexandria, VA 22311

Schedule

100% onsite

Clearance

US Citizens with DOD Top Secret

Responsibilities Qualifications
  • Engineering & Deployment: Engineer, deploy, secure, and maintain complex, mission-critical identity systems-specifically ForgeRock IdP/ICAM platforms-across Linux-based environments to meet DoD, DISA, and federal standards.
  • Integration & Federation: Integrate enterprise applications and directories (LDAP, Active Directory) with ICAM platforms using robust federation protocols (SAML, OAuth2, APIs) across cross-domain workflows and secure enclaves.
  • Lifecycle & Access Control: Manage the complete identity and credentiallifecycle (issuing, renewing, revoking, and automating workflows) to enforce strict Zero Trust access controls.
  • Security & Compliance: Conduct system hardening, log analysis, and vulnerability management to support compliance with the Risk Management Framework (RMF) and participate in architectural and risk reviews.
  • Operations & Troubleshooting: Diagnose and resolve escalated ICAM and ForgeRock issues within defined SLAs, conducting root cause analysis, performance tuning, and active monitoring.
  • Documentation & Metrics: Create and version-control key engineering artifacts (CONOPS, SOPs, API documentation, and workflow diagrams) while maintaining ICAM performance metrics and dashboards.

Basic Qualifications

  • BS in Computer Science, IT, or related discipline and 8+ years of systems engineering experience (or equivalent experience in lieu of degree).
  •  Active TS clearance with SCI eligibility
  •  Ability to obtain and maintain a CI Poly and Special Program Access.
  •  IAT Level II certification or higher (e.g., Security+ CE, CySA+, SSCP, CISSP).
  •  Hands on experience with federation technologies (SAML, OAuth2) and ZeroTrust identity principles.
  • Experience engineering or administering the ForgeRock platform (AM, IDM, DS).
  • Strong understanding of ICAM concepts, identity lifecycle management, and enterprise access controls.
  • Experience with Windows and Linux systems administration, shell scripting, and troubleshooting.

Preferred Qualifications

  • Experience supporting DISA or DoD mission partners.
  • Active TS/SCI with CI Poly preferred.
  • Experience with any of the following:
    - JISG Access Controls
    - AWS cloud engineering, IAM, and security services
    - Ansible playbooks and automated configuration management
    - CI/CD pipelines (GitLab, Jenkins, etc.)

If you are interested, please send an email to hr@rmantras.com">HR@rmantras.com

Job ID

icam-engineer-identity-credential-and-access-management|loc1
About RMantra
Go to job list