> Markdown version of [/jobs/ext/2719437-icam-ad-solutions-architect](https://www.wearedevelopers.com/jobs/ext/2719437-icam-ad-solutions-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # ICAM/AD Solutions Architect - **Company:** Leidos, Inc. - **Location:** Washington, DC, United States - **Experience:** Expert - **Salary:** $131,300.0 - $237,350.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Microsoft Windows, Active Directory, Amazon Web Services, Application Services, User Authentication, Authentication Protocols, Microsoft Azure, Backup Devices, Cloud Computing, Data Security, Dynamic Host Configuration Protocol, DevOps, Disaster Recovery, Domain Name System (DNS), Multi-Factor Authentication, Identity and Access Management, Kerberos (Protocol), Windows Servers, NT LAN Manager, OAuth, Performance Tuning, Public Key Infrastructure, Windows PowerShell, Role-Based Access Control, Power BI, Openid Connect, Azure Active Directory, Cloud Services, Zero Trust Network Access, Security Assertion Markup Language (SAML), Virtual Machines, Google Cloud, Enterprise Software Applications, Cloud Platform System, System Availability, Customer Identity Access Management, Bicep, Tools for Reporting, Cloud Migration, Functional Programming, CIS Benchmarks, Terraform - **Published:** September 4, 2026 - **Apply:** https://www.themuse.com/jobs/leidos/icamad-solutions-architect ## About the Role * BS degree and 12+ years of prior relevant experience; additional experience in lieu of degree * 8+ years of hands-on experience in a lead role * MCSE or MCSA certification in Windows Server / Directory Services is required * Proven experience/proficiency in enterprise-level Windows Server administration and Directory Services management. * Proven experience with Azure services: Azure Virtual Machines, Azure AD Domain Services, Azure Arc, and Microsoft Entra suite. * Understanding of Attributes Based Access Control (ABAC) implementation, Role-Based Access Control (RBAC), and Policy-Based Access Control (PBAC) * Strong expertise in Azure AD / Entra ID, hybrid identity, and cloud migration projects. * Deep knowledge of Windows Server operating systems (2016/2019/2022), AD DS, DNS, DHCP, PKI, and certificate services. * Proven experience with Azure services: Azure Virtual Machines, Azure AD Domain Services, Azure Arc, and Microsoft Entra suite. * PowerShell scripting proficiency for automation and reporting. * Demonstrated experience with one of more of the following: + Digital Identity Management and Identity Governance + Authorization ICAM services + Data Security Architecture and Data Protection Services + Customer Identity Access Management (CIAM) solutioning + Authentication and Multi-Factor Authentication (MFA) solutions + Cloud first and cloud native architectures (any or all of Amazon Web Services, Azure, Google Cloud) + Utilizing cloud services to build infrastructure as code in an automated fashion * Must have a solid understanding of IdAM / ICAM Services like Authentication, Authorization, Identity, and Data Protection through Digital Policy * Demonstrated experience for client support of large scale enterprise applications * Strong communication skills via documentation and verbally with senior management, + Microsoft Certified: Azure Administrator Associate (AZ-104) + Microsoft Certified: Identity and Access Administrator Associate (AZ-305 or SC-300) + Microsoft Certified: Windows Server Hybrid Administrator Associate (preferred) + Familiarity with Power BI or other reporting tools * Experience with Azure Landing Zones, Governance (Azure Policy, Blueprints), and Bicep/Terraform. * Knowledge of modern authentication protocols (SAML, OAuth, OpenID Connect, Kerberos, NTLM). * Familiarity with security tools such as Microsoft Defender for Identity, Sentinel, and Privileged Access Workstation (PAW). * Experience with DevOps and automation: PowerShell, Lambda ## Description Leidos is seeking a Senior Technical Solutions Architect responsible for delivering modern Identity Access Credential Management (ICAM) solutions and Zero Trust Architectures (ZTA). Role responsibilities include technical leadership for modernization initiatives, translating business requirements into technical solutions alternatives, hands-on implementation/prototyping of identified solutions, and IPT project management activities across multiple ICAM service capabilities. The ideal candidate will be a technical leader for designing, implementing, managing, troubleshooting, and optimizing enterprise-grade Active Directory and Entra ID solutions. This role is critical in maintaining secure, scalable, and highly available identity infrastructure across on-premises and cloud environments., * Manage and prioritize tasks within the team directory services team, ensuring timely delivery of projects and effective resource utilization. * Design, implement, and manage Active Directory Domain Services (AD DS), including forest/domain architecture, trusts, replication, and high availability. * Lead hybrid identity initiatives using Azure AD Connect, Entra ID, and cloud sync technologies. * Develop best-of-breed ZT and ICAM solutions through COTS integration activities * Perform technical triage, business to technical requirements decomposition, and solutioning as part of the requirements process that inform downstream feature development * Manage and optimize Group Policy Objects (GPOs), OU structures, and security baselines. * Implement and maintain identity governance, role-based access control (RBAC), Privileged Identity Management (PIM), and Conditional Access policies in Azure. * Perform AD health monitoring, performance tuning, backup/recovery, and disaster recovery planning. * Migrate and modernize legacy AD environments to Azure-native or hybrid solutions. * Perform hands-on implementation / prototyping of solutions * Provide oral and written presentations to senior leaders describing solution options along with advantages and disadvantages of alternatives * Champions the development, documentation, and execution of system policies * Influence project/team leaders regarding solution design, process and/or approaches. * Requires expert knowledge of and ability to apply advanced technical principles, theories, and concepts. * Troubleshoot complex identity and authentication issues across Windows, Azure, and third-party applications. * Collaborate with Security, Networking, and Application teams to enforce Zero Trust principles and compliance standards (e.g., NIST, CIS, SOC2, ISO27001). ## Related Videos - [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)