> Markdown version of [/jobs/ext/2388728-lead-specialist-federal-icam-identity-credential-and-access-management-engineer](https://www.wearedevelopers.com/jobs/ext/2388728-lead-specialist-federal-icam-identity-credential-and-access-management-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Lead Specialist, Federal ICAM (Identity, Credential, and Access Management) Engineer

- **Company:** Kpmg LLP
- **Location:** Washington, DC, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Software as a Service, Multi-Factor Authentication, Infrastructure as a Service (IaaS), Identity and Access Management, Platform as a Service (PAAS), Zero Trust Network Access, Single Sign-On, Google Cloud, Okta, Cyberark, SailPoint
- **Published:** August 2, 2026
- **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/17798918?backUrl=%2Fcareer%2F17798918%2FLead-Specialist-Federal-Icam-Identity-Credential-Access-Management-Engineer-D-C-Washington

## About the Role

* A minimum of five years of experience in cybersecurity with a focus on Identify and Access Management; U.S. Federal government consulting experience preferred
 * Bachelor's degree from an accredited college/university
 * Demonstrated experience with federal ICAM programs and frameworks, such as Federal Identity, Credential, and Access Management (FICAM), HSPD-12, PIV/CAC, and NIST SP 800-53 (Digital Identity Guidelines)
 * Hands-on implementation experience with one or more of the following platforms: Identify Governance and Administration (IGA), Sailtpoint (IdentityIQ or IdentityNOW), Access Management, SSO (Okta), PAM (CyberArk)
 * Preferred certifications: CISSP, GSEC, GCED
 * Okta, SailPoint IdentityIQ Engineer, and/or CyberArk Delivery Engineer certifications strongly preferred
 * Experience with identity services in major cloud providers (AWS, Azure, GCP)
 * Excellent written and verbal communication skills with the ability to articulate complex technical concepts to both technical and non-technical stakeholders
 * Ability to travel as required to support firm engagements
 * Applicant must possess a U.S. Government Secret clearance

## Description

* Lead the architecture, deployment, and management of Identity, Credentialing, and Access Management (ICAM) solutions using platforms such as Okta, SailPoint, and CyberArk
 * Develop and enforce access control policies, standards, and procedures in alignment with Zero Trust principles and federal mandates (e.g. NIST, FICAM, HSPD-12)
 * Engineer and manage the full lifecycle of digital identifies, including provisioning, de-provisioning, and periodic access reviews
 * Integrate ICAM solutions with a wide variety of applications and infrastructure, including cloud (IaaS, PaaS, SaaS) and on-premises environments
 * Serve as technical lead for Privileged Access Management (PAM) initiatives, securing and monitoring access for high-risk accounts using tools like CyberArk
 * Translate federal client unique mission requirements into technical ICAM strategies and roadmaps
 * Troubleshoot and resolve complex issues related to identity federation, single sign-on (SSO), multi-factor authentication (MFA), and directory services
 * Mentor and review work of junior engineers and act as a key technical advisor to senior leadership


## Related Videos

- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)
- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026)
- [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)