> Markdown version of [/jobs/ext/3051350-icam-engineer](https://www.wearedevelopers.com/jobs/ext/3051350-icam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # ICAM Engineer - **Company:** Booz Allen Hamilton Inc. - **Location:** Reston, VA, United States - **Experience:** Expert - **Salary:** $99,000.0 - $225,000.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Active Directory Federation Services, Application Integration Architecture, Audit Trail, Cloud Computing, Cloud Computing Security, Cyber Security, Federated Identity Management, Monitoring of Systems, Identity and Access Management, Key Management, Network Security, Lightweight Directory Access Protocols (LDAP), Metadata, OAuth, Oracle (Applications), Ping (Networking Utility), Role-Based Access Control, Openid Connect, Azure Active Directory, Cloud Services, Zero Trust Network Access, Security Assertion Markup Language (SAML), Security Information and Event Management, Systems Integration, Okta, Terraform, Oracle Cloud Infrastructure - **Published:** September 24, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9189557/icam-engineer ## About the Role * 8+ years of experience in identity and access management, cloud security engineering, or cybersecurity * Experience integrating commercial cloud environments with agency-specific enterprise services and identity architectures * Experience designing, deploying, securing, and operating OCI solutions * Experience integrating applications and cloud services with enterprise IAM platforms such as GEOAxIS * Experience implementing federation, SSO, MFA, identity lifecycle management, RBAC, ABAC, and least-privilege access * Experience with SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, LDAP, Active Directory, token claims, attribute mapping, certificates, and metadata exchange * Experience applying Zero Trust principles and supporting secure identity designs, control implementation, testing, and operating procedures * Knowledge of RMF, ICD 503, and authorization processes * Active TS/SCI clearance; willingness to take a polygraph exam * Bachelor's degree Nice If You Have: * Experience supporting security assessments, authorization packages, control validation, or remediation tracking * Experience integrating cloud and identity logs with enterprise monitoring or SIEM platforms * Experience with Terraform, OCI Resource Manager, or comparable infrastructure-as-code and automated configuration tools * Experience with Ping Identity, Microsoft Entra ID, Okta, or ADFS * Experience supporting ICAM or cloud onboarding in classified, regulated, or other mission environments * Possession of excellent stakeholder communication and troubleshooting skills * Architecture, Security, Networking, or Cloud Operations Associate- or Professional-level OCI Certifications ## Description As an ICAM Engineer, you'll integrate commercial cloud environments with agency enterprise services and identity architectures in secure, regulated, and mission-focused environments. You'll design, deploy, secure, and operate OCI solutions while supporting identity federation, access management, Zero Trust, and cloud onboarding. You'll work with Oracle personnel, government stakeholders, security teams, and technical delivery teams to implement secure identity solutions, support authorization activities, and transition cloud capabilities into reliable operations. What You'll Work On: * Design, deploy, secure, and operate OCI solutions involving identity, audit logging, network security, secrets and key management, and privileged access. * Integrate cloud applications and services with agency enterprise IAM platforms, including NGA GEOAxIS or comparable capabilities. * Implement federation, SSO, MFA, identity lifecycle provisioning and deprovisioning, RBAC, ABAC, and least-privilege access models. * Configure and troubleshoot SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, LDAP, and Active Directory integrations. * Manage token claims, attribute mapping, certificates, metadata exchange, and authentication-flow troubleshooting. * Apply Zero Trust principles and develop secure identity designs, control implementations, test evidence, and operating procedures. * Support RMF, ICD 503, and NGA A&A activities, including security-control implementation and assessment evidence. * Coordinate solution architectures, resolve technical issues, and communicate identity, security, and operational risks to stakeholders. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [A Data Mesh needs Open Metadata](https://www.wearedevelopers.com/videos/505-a-data-mesh-needs-open-metadata) - [Unleashing Potential Across Teams: The Power of Infrastructure as Code](https://www.wearedevelopers.com/videos/930-unleashing-potential-across-teams-the-power-of-infrastructure-as-code) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Crafting Custom Frameworks with Rust: A Deep Dive into Procedural Macros](https://www.wearedevelopers.com/videos/849-crafting-custom-frameworks-with-rust-a-deep-dive-into-procedural-macros) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)