> Markdown version of [/jobs/ext/1801711-specialist-director-federal-identity-icam-architect](https://www.wearedevelopers.com/jobs/ext/1801711-specialist-director-federal-identity-icam-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Specialist Director, Federal Identity (ICAM) Architect

- **Company:** Kpmg LLP
- **Location:** McLean, VA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Software as a Service, Multi-Factor Authentication, Infrastructure as a Service (IaaS), Identity and Access Management, Information Systems Security Architecture Professional, Platform as a Service (PAAS), Single Sign-On, Google Cloud, Okta, Cyberark, SailPoint
- **Published:** July 31, 2026
- **Apply:** https://www.kpmguscareers.com/jobdetail/?jobId=135844

## About the Role

* A minimum of eight years of technical Identity (ICAM) architecture experience
 * Bachelor's degree from an accredited college/university
 * Preferred Certifications: CISSP (Certified Information Systems Security Professional), GIAC certifications (e.g. - GSEC, GCED), vendor specific certifications (e.g. - Okta Certified Professional, SailPoint Certified IdentityIQ Engineer, CyberArk Certified Delivery Engineer)
 * Experience with federal ICAM programs / frameworks, such as Federal Identity, Credential, and Access Management (FICAM), HSPD-12, PIV/CAC, and NIST SP 800-63 (Digital Identity Guidelines)
 * Experience managing staff and project engagements
 * Experience with identity services in major cloud providers (e.g. - AWS, Azure, GCP)
 * Implementation experience with one or more of the following platforms: Identity Governance & Adminstration (IGA), SailPoint (IdentityIQ or IdentityNow), Access Management/SSO: Okta, Privileged Access Management (PAM): CyberArk
 * Ability to travel as required to support firm engagements
 * Applicant must possess a U.S. Government Secret clearance

## Description

* Lead the architecture, design, and deployment of comprehensive ICAM solutions using platforms such as Okta, SailPoint, and CyberArk
 * Develop / enforce access control policies, standards, and procedures in alignment with federal mandates (e.g. - NIST, FICAM, HSPD-12)
 * Engineer / manage the full lifecycle of digital identities, including provisioning, de-provisioning, and periodic access reviews
 * Integrate ICAM solutions with a wide variety of applications and infrastructure, including cloud (IaaS, PaaS, SaaS) and on-premises environments
 * Serve as the technical lead for Privileged Access Management (PAM) initiatives, securing and monitoring access for high-risk accounts utilizing tools like CyberArk
 * Collaborate with federal clients to understand their unique mission requirements, translate them into technical ICAM strategies, and roadmaps
 * Troubleshoot / resolve complex issues related to identity federation, single sign-on (SSO), multi-factor authentication (MFA), and directory services
 * Provide mentorship to junior engineers and act as a key technical advisor to senior leadership


## Related Videos

- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Building Sovereign AI: Lessons from Deploying Secure RAG Systems using Confidential Computing](https://www.wearedevelopers.com/videos/100108-building-sovereign-ai-lessons-from-deploying-secure-rag-systems-using-confidential-computing)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026)