> Markdown version of [/jobs/ext/1424942-senior-icam-engineer](https://www.wearedevelopers.com/jobs/ext/1424942-senior-icam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior ICAM Engineer - **Company:** E&m Technologies, Inc. - **Location:** Chantilly, VA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Agile Methodology, Amazon Web Services, Computing Platforms, Architectural Patterns, User Authentication, Computer Programming, Continuous Integration, Linux, DevOps, Distributed Systems, High-Level Architecture, Python (Programming Language), Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, OpenShift, Oracle (Applications), X.509, Role-Based Access Control, Security Assertion Markup Language (SAML), Secure Coding, Systems Integration, Reliability of Systems, Containerization, Integration Tests, Kubernetes, Infrastructure Automation Frameworks, Microservices - **Published:** July 24, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=a54c6171b07a7e79 ## About the Role * Bachelor's degree in a Science, Technology, Engineering, and Mathematics (STEM) field and 8+ years of relevant experience, or equivalent experience. * Hands-on experience developing or integrating systems related to identity, authentication, authorization, or enterprise security. * Experience implementing distributed systems or microservices architectures on modern platforms. * Experience supporting Agile teams and contributing to iterative delivery of new capabilities. * Ability to interpret architectural guidance and convert designs into high quality, maintainable engineering solutions. * Ability to obtain Security+ within 90 days of hire. * All candidates must be US CITIZENS to be considered for the position. * Must have and be capable of maintaining a U.S. Department of Defense (DoD) security clearance at the required level and ability to pass a Counterintelligence Polygraph. Preferred Qualifications: * Experience with Kubernetes or OpenShift for deployment and container orchestration. * Programming experience with Java and/or Python. * Familiarity with GitOps tools. * Experience with Amazon Web Services (AWS), Linux, or containerization technologies. * Knowledge of identity and access standards: X.509, SAML, OAuth2, OIDC, LDAP. * Experience with Oracle products or similar ICAM vendor technologies. * Experience implementing ABAC/RBAC models, policy-based access controls, and ZT aligned authorization patterns. * Experience supporting Intelligence Community (IC) or Department of War (DoW) systems, particularly authorization and identity-centric services. ## Description * Implement ICAM modernization designs for PEP/PIP/EMS and RPMS components, ensuring alignment with architectural patterns and modernization goals. Transition from the legacy PDP to JBlocks. * Develop and integrate microservices supporting identity, attributes, authorization, resource registration, and policy distribution. * Work closely with the Architect to translate high-level designs into detailed engineering tasks, technical artifacts, and system interfaces. * Support the Technical Lead by providing technical input during Program Increment (PI) planning, backlog refinement, work estimation, and risk identification. * Develop new PEP/PIP patterns including enforcement endpoints, policy decision integrations, and attribute retrieval mechanisms. * Enhance EMS and RPMS services by implementing automation for resource/role lifecycle management, attribute orchestration, and policy ingestion workflows. * Collaborate closely with Development and Operations (DevOps) engineers on Continuous Integration and Continuous Delivery (CI/CD), containerization, infrastructure automation, and deployment to Kubernetes or the governments currently installed application platform. * Troubleshoot complex identity, authentication, authorization, and policy-related issues across legacy and modernized components. * Contribute to engineering documentation including design specifications, data flow diagrams, configuration standards, and interface definitions. * Ensure modernization activities reduce operational overhead and improve system reliability, maintainability, and observability. * Participate in integration testing, operational readiness testing, and deployment validation across multiple environments and security domains. * Mentor junior engineers and promote best practices in secure coding, microservices development, and ICAM integration. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)