ICAM Identity Governance and Provisioning Engineer

Serves as a senior technical engineer for ICAM identity governance, automated account provisioning, entitlement management, and Master User Record capabilities; designing, configuring, integrating, and sustaining identity lifecycle workflows, role and attribute models, access certification, audit reporting, and identity data synchronization across DoD enterprise, cloud, mission, and legacy environments; supporting Zero Trust and FICAM-aligned ICAM services; and ensuring compliance with DoD, NIST, and Intelligence Community standards and frameworks. \n \n \nPrimary Responsibilities \n \n \n

• Work with senior leadership, customers, application owners, and mission partners to plan and execute ICAM governance and provisioning activities using Agile methodologies.\n
• Integrate identity governance, provisioning, directory, and audit capabilities across platforms such as SailPoint, Radiant Logic, Okta, Saviynt, Delinea, ServiceNow, Microsoft Entra ID, Active Directory, LDAP, and related ICAM technologies.\n
• Assess current identity governance, provisioning, directory, and entitlement environments; analyze alternatives and implement solutions that modernize enterprise account lifecycle management and replace manual access request processes.\n
• Develop and present workflow designs, integration artifacts, provisioning rules, access review materials, test plans, technical briefings, and demonstrations.\n
• Evaluate emerging identity governance and provisioning technologies and guide engineering teams in implementing scalable, compliant, and mission-aligned solutions.\n
• Develop service design procedures and technical recommendations for identity lifecycle management, delegated administration, access certification, entitlement management, and identity data integration.\n
• Ensure engineering teams deliver efficient and effective identity governance, provisioning, de-provisioning, audit, and compliance capabilities supporting enterprise mission objectives.\n
• Support integration of provisioning and entitlement services across cloud, enterprise directory, and mission application environments.\n
• Provide technical status updates and implementation risk assessments to internal and external stakeholders.\n
• Serve as a technical lead for identity governance, automated provisioning, and Master User Record implementation activities while mentoring junior engineers.\n
• Prepare and present technical briefings, demonstrations, architecture diagrams, and implementation plans.\n
• Recognized as a trusted technical leader for ICAM identity governance, entitlement management, and provisioning automation.\n

• Active DoD Secret Clearance or higher.\n
• Typically requires BS degree and 12+ years relevant experience. Additional experience may be considered in lieu of degree.\n
• Experience with IdAM / ICAM delivery systems, identity governance, automated provisioning and de-provisioning, authentication, authorization, entitlement management, access certification, role engineering, and digital policy management.\n
• Experience integrating identity governance platforms with cloud, enterprise directory, and mission application environments using APIs, SCIM, LDAP, Active Directory, REST, SQL, and workflow automation technologies.\n
• Understanding of RBAC, ABAC, segregation of duties, privileged account auditing, identity data normalization, and identity-related audit/compliance processes supporting DoD accreditation requirements.\n
• Experience supporting identity governance and provisioning services within cloud-hosted and hybrid enterprise environments.\n
• Experience interacting with cross-functional teams including Software Development, Systems Engineering, Security, Compliance, Verification and Validation, Quality Assurance, and Operations.\n
• Excellent oral and written communication skills.\n, * Experience implementing SailPoint, Saviynt, Okta Identity Governance, or equivalent IGA platforms.\n
• Experience supporting Master User Record (MUR), enterprise entitlement reporting, or insider threat analytics capabilities.\n
• Experience integrating legacy applications into enterprise identity governance and provisioning architectures.\n
• Experience supporting IL5/IL6, GovCloud, C2S, or classified cloud environments.\n
• Familiarity with NIST 800-53, NIST 800-63, NIST 800-162, and DoD Zero Trust guidance.\n
• TS/SCI eligible.\n