> Markdown version of [/jobs/ext/1955371-icam-engineer-identity-credential-and-access-management](https://www.wearedevelopers.com/jobs/ext/1955371-icam-engineer-identity-credential-and-access-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # ICAM Engineer - Identity, Credential, and Access Management - **Company:** RMANTRA SOLUTIONS INC. - **Location:** Alexandria, VA, United States - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), Amazon Web Services, Systems Engineering, Configuration Management, Cyber Security, Identity and Access Management, Lightweight Directory Access Protocols (LDAP), Linux System Administration, Log Analysis, OAuth, Performance Tuning, Ansible, Zero Trust Network Access, Security Assertion Markup Language (SAML), Shell Script, Software Vulnerability Management, Enterprise Software Applications, Gitlab, Information Technology, Software Version Control, Jenkins - **Published:** August 6, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9076944/icam-engineer-identity-credential-and-access-management ## About the Role * BS in Computer Science, IT, or related discipline and 8+ years of systems engineering experience (or equivalent experience in lieu of degree). * Active TS clearance with SCI eligibility * Ability to obtain and maintain a CI Poly and Special Program Access. * IAT Level II certification or higher (e.g., Security+ CE, CySA+, SSCP, CISSP). * Hands on experience with federation technologies (SAML, OAuth2) and ZeroTrust identity principles. * Experience engineering or administering the ForgeRock platform (AM, IDM, DS). * Strong understanding of ICAM concepts, identity lifecycle management, and enterprise access controls. * Experience with Windows and Linux systems administration, shell scripting, and troubleshooting., * Experience supporting DISA or DoD mission partners. * Active TS/SCI with CI Poly preferred. * Experience with any of the following: - JISG Access Controls - AWS cloud engineering, IAM, and security services - Ansible playbooks and automated configuration management - CI/CD pipelines (GitLab, Jenkins, etc.) ## Description * Engineering & Deployment: Engineer, deploy, secure, and maintain complex, mission-critical identity systems-specifically ForgeRock IdP/ICAM platforms-across Linux-based environments to meet DoD, DISA, and federal standards. * Integration & Federation: Integrate enterprise applications and directories (LDAP, Active Directory) with ICAM platforms using robust federation protocols (SAML, OAuth2, APIs) across cross-domain workflows and secure enclaves. * Lifecycle & Access Control: Manage the complete identity and credential lifecycle (issuing, renewing, revoking, and automating workflows) to enforce strict Zero Trust access controls. * Security & Compliance: Conduct system hardening, log analysis, and vulnerability management to support compliance with the Risk Management Framework (RMF) and participate in architectural and risk reviews. * Operations & Troubleshooting: Diagnose and resolve escalated ICAM and ForgeRock issues within defined SLAs, conducting root cause analysis, performance tuning, and active monitoring. * Documentation & Metrics: Create and version-control key engineering artifacts (CONOPS, SOPs, API documentation, and workflow diagrams) while maintaining ICAM performance metrics and dashboards. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More](https://www.wearedevelopers.com/videos/1805-wearedevelopers-live-modern-devops-for-iot-devices-and-more) - [The Road to MLOps: How Verivox Transitioned to AWS](https://www.wearedevelopers.com/videos/1050-the-road-to-mlops-how-verivox-transitioned-to-aws) - [Unleashing Potential Across Teams: The Power of Infrastructure as Code](https://www.wearedevelopers.com/videos/930-unleashing-potential-across-teams-the-power-of-infrastructure-as-code) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)