> Markdown version of [/jobs/ext/1821852-icam-solution-architect](https://www.wearedevelopers.com/jobs/ext/1821852-icam-solution-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # ICAM Solution Architect - **Company:** Caci Inc - **Location:** United States - **Experience:** Expert - **Salary:** $105,100.0 - $231,100.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Active Directory, Active Directory Federation Services, User Authentication, Authentication Protocols, Cyber Security, Federal Information Processing Standards (FIPS), Identity and Access Management, Interoperability, Kerberos (Protocol), OAuth, OpenID, Public Key Infrastructure, Azure Active Directory, Phishing, Zero Trust Network Access, Security Assertion Markup Language (SAML), Data Streaming, Systems Integration, Technical Debt, Siteminder, Servicenow - **Published:** July 1, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9005657/icam-solution-architect ## About the Role Required: * 10+ years of experience in Identity, Credential, and Access Management architecture or enterprise security architecture. * Deep knowledge of identity lifecycle workflows, identity stores, directory services, authentication protocols (SAML, OIDC/OAuth, Kerberos), PKI. * * Hands on experience with one or more NASA-relevant systems: Active Directory/Entra ID, ADFS, IdMAX, PIV/PKI, NAMS/SNAMS, Siteminder/eAuth, Credentialing systems, EPACS. * * Strong familiarity with federal ICAM guidance: OMB A 130, M 19 17, Zero Trust (M 22 09), NIST SP 800 63, 800 53, FIPS 201. * * Demonstrated ability to create technical architecture artifacts (diagrams, data flows, models, standards). * * Experience leading technical teams or influencing engineers in a large enterprise environment. * * Desired: * Experience with cloud identity governance (Azure AD/Entra ID, AWS IAM, GCP IAM). * Advanced understanding of Zero Trust identity, authentication patterns. * * Background integrating ICAM into CI/CD pipelines, automation frameworks. ## Description The ICAM Solutions Architect provides technical leadership across identity, credential, and access services by shaping ICAM strategy, defining and governing architecture, aligning roadmaps with mission and security priorities, and ensuring seamless integration of ICAM capabilities across the agency. This role partners with engineering, cybersecurity, governance bodies, and mission stakeholders to deliver a secure, modern, and scalable ICAM ecosystem in alignment with federal mandates and Zero Trust principles., ICAM Strategy & Enterprise Architecture * Develop and maintain the enterprise ICAM strategy and future state architecture across identity, credential, authentication, and access services. * Define modernization roadmaps aligned with Zero Trust, cloud identity patterns, and federal ICAM guidance (M 19 17, A 130, NIST 800 63, 800 53). * Conduct architectural assessments across ICAM service towers (IdMAX, NED, NCAD, Entra ID, NAMS/SNAMS, Credentialing Services, eAuth, EPACS, PKI). Governance, Compliance & Risk Alignment * Lead architectural alignment with federal identity requirements, including OMB, FISMA, NIST, CDM, and agency wide cybersecurity strategies. * Support ICAM governance bodies by preparing architecture artifacts, decision briefs, risk assessments, and compliance evaluations. * Establish technical guardrails, standards, and reference architectures for identity lifecycle, access provisioning, credentialing, and authentication services. ICAM Integration, Interoperability & Data Flows * Define and manage integration patterns across identity stores, directories, authentication services, access workflows, and credential platforms. * Architect enterprise data flows between IdMAX * NED * NCAD/Entra ID * NAMS/SNAMS * apps and mission systems. * Ensure interoperability with federal shared services (FPKI, Idemia, DHS, GSA) and enterprise solutions (Microsoft, ServiceNow, cloud platforms). Technical Leadership & Roadmap Execution * Provide technical oversight to ICAM engineering teams responsible for implementing and operating identity, credentialing, PKI, authentication, and access tools. * Review and approve solution designs, data models, integrations, and changes to ICAM platforms. * * Monitor emerging identity trends (phishing-resistant MFA, passwordless, FIDO2, device identity, behavioral analytics). * Participate in sprint reviews, backlog prioritization, and cross-functional planning to ensure architectural alignment. * * Performance, Metrics & Continuous Improvement * Define ICAM architectural performance metrics and KPIs (identity assurance, provisioning times, certificate lifecycle health, authentication quality, account hygiene). * Guide continuous improvement initiatives, addressing technical debt, legacy dependencies, and modernization blockers. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Going Beyond Passwords: The Future of User Authentication](https://www.wearedevelopers.com/videos/714-going-beyond-passwords-the-future-of-user-authentication) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026) - [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026) - [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems)