Senior ICAM Engineer with Security Clearance

Job Description acuCyber is seeking an Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services supporting mission applications and secure information sharing. This role combines identity federation, directory integration, account provisioning, and application development within Department of Defense and Intelligence Community environments. The engineer will work with software developers, infrastructure engineers, and security personnel to connect identity services with mission systems.

Candidates should understand how authentication, identity attributes, and authorization decisions work across an enterprise and be able to troubleshoot the configurations, interfaces, and application code that support those functions. This is a full-time, on-site role at a Government facility in Charleston, SC or the National Capital Region (NCR).

What You'll Do: • Implement and integrate enterprise ICAM services with mission applications, directories, and authoritative identity and attribute sources. • Develop and maintain Application Programming Interfaces (APIs) and service integrations that provide identity information and support access control decisions. • Configure and troubleshoot identity federation, single sign-on, and application authentication using OpenID Connect (OIDC) and other applicable standards. • Integrate identity platforms with Active Directory, enterprise directories, and personnel and training systems. • Automate account and group provisioning, updates, and deprovisioning while maintaining accurate identity attributes and access entitlements. • Support migration from legacy identity platforms to modern services, preserving configurations, identity mappings, provisioning behavior, and application functionality. • Implement and maintain virtual directory services, identity data aggregation, synchronization, and replication. • Work with application developers to resolve authentication failures, token and claim mapping issues, and authorization inconsistencies. • Support identity federation across networks and mission partners, applying approved data-sharing restrictions and cross-domain transfer processes. • Protect identity data through encryption, appropriate access controls, and secure service communications. • Support identity services in environments with intermittent or limited connectivity, including approved caching and synchronization of identity and authorization information. • Use automation and configuration management to establish consistent identity service deployments across environments. • Maintain integration documentation, configuration baselines, test procedures, and operational guidance.

Required Skills • Active Top Secret/Sensitive Compartmented Information (TS/SCI) clearance with the ability to obtain a Counterintelligence (CI) Polygraph. • Prior experience supporting the Intelligence Community. • Bachelor's degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in computer science or equivalent • 10+ years of directly relevant experience • Professional experience implementing, integrating, or operating enterprise identity and access management services. • Hands-on experience with identity federation, application authentication, and OIDC. • Experience integrating applications with identity providers, including configuring claims, identity attributes, and access mappings. • Experience with Active Directory and Lightweight Directory Access Protocol (LDAP)-based directory services. • Understanding of account lifecycle management, group provisioning, identity synchronization, and entitlement management. • Experience developing or modifying APIs, scripts, or application integrations supporting identity services. • Ability to troubleshoot authentication and authorization issues across applications, identity providers, directories, and network connections. • Understanding of role-based and attribute-based access control, least privilege, and protection of identity data. • Experience documenting configurations, testing integrations, and managing changes in secure enterprise environments. • Ability to meet applicable cybersecurity workforce qualification requirements for the assigned position. • Ability to work on-site with the Customer.

This is a full-time, on-site role at a Government facility.

Desired Skills • Master's degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in computer science or equivalent • CompTIA Security+ certification. • Identity platforms: Experience with PingFederate, Radiant Logic, SailPoint, Keycloak, Okta, or Secret Server. • Identity provider migration: Experience migrating applications from Keycloak to PingFederate or between comparable platforms, including adapting application code, claims, tokens, and identity mappings. • Directory modernization: Experience with virtual directories, Microsoft Identity Manager, directory consolidation, and migration of legacy provisioning services. • Federation standards: Experience with Security Assertion Markup Language (SAML), OAuth 2.0, and System for Cross-domain Identity Management (SCIM). • Development and automation: Experience with Go, Python, Ansible, or comparable tools for service integration and repeatable configuration. • Cloud and container platforms: Familiarity with Amazon Web Services (AWS), AWS GovCloud, Kubernetes, Red Hat OpenShift, and deployments subject to Department of Defense Impact Level 5 requirements. • Certificates and credentials: Experience with Public Key Infrastructure (PKI), certificate-based authentication, certificate lifecycle management, and secure credential handling. • Mission environments: Experience supporting identity federation across security domains or identity services under Denied, Disrupted, Intermittent, and Limited (DDIL) connectivity conditions. • Zero Trust: Experience integrating identity attributes and policy-based access decisions into application and data protection services.