> Markdown version of [/jobs/ext/3054053-icam-engineer](https://www.wearedevelopers.com/jobs/ext/3054053-icam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # ICAM Engineer - **Company:** Trinity Global Consulting - **Location:** United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Agile Methodology, Amazon Web Services, Computing Platforms, Architectural Patterns, User Authentication, CompTIA Security+, Computer Programming, Continuous Integration, Linux, DevOps, Distributed Systems, High-Level Architecture, Python (Programming Language), Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, OpenShift, Oracle (Applications), X.509, Role-Based Access Control, Zero Trust Network Access, Security Assertion Markup Language (SAML), Secure Coding, Systems Integration, Reliability of Systems, Containerization, Integration Tests, Kubernetes, Infrastructure Automation Frameworks, Microservices - **Published:** September 24, 2026 - **Apply:** https://www.thejobnetwork.com/job/c2b2dc52-0bb3-42a4-86fa-f72ebb2bbd71/senior-icam-engineer ## About the Role * Bachelor's degree in a Science, Technology, Engineering, and Mathematics (STEM) field and 8+ years of relevant experience, or equivalent experience. * Hands-on experience developing or integrating systems related to identity, authentication, authorization, or enterprise security. * Experience implementing distributed systems or microservices architectures on modern platforms. * Experience supporting Agile teams and contributing to iterative delivery of new capabilities. * Ability to interpret architectural guidance and convert designs into high-quality, maintainable engineering solutions. * Ability to obtain CompTIA Security+ within 90 days of hire. * Active Top Secret security clearance upon hire with SCI eligibility. * U.S. citizenship. Desired Qualifications * Experience with Kubernetes or OpenShift for deployment and container orchestration. * Programming experience with Java and/or Python. * Familiarity with GitOps tools. * Experience with Amazon Web Services (AWS), Linux, or containerization technologies. * Knowledge of identity and access standards: X.509, SAML, OAuth2, OIDC, LDAP. * Experience with Oracle products or similar ICAM vendor technologies. * Experience implementing ABAC/RBAC models, policy-based access controls, and Zero Trust-aligned authorization patterns. * Experience supporting Intelligence Community (IC) or Department of War (DoW) systems, particularly authorization and identity-centric services. ## Description Job DescriptionDuties May Include * Implement ICAM modernization designs for PEP/PIP, EMS, and RPMS components, ensuring alignment with architectural patterns and modernization goals, including transition from the legacy PDP to JBlocks. * Develop and integrate microservices supporting identity, attributes, authorization, resource registration, and policy distribution. * Collaborate with the Architect to translate high-level designs into detailed engineering tasks, technical artifacts, and system interfaces. * Support the Technical Lead by providing technical input during Program Increment (PI) planning, backlog refinement, work estimation, and risk identification. * Develop new PEP/PIP patterns, including enforcement endpoints, policy decision integrations, and attribute retrieval mechanisms. * Enhance EMS and RPMS services by implementing automation for resource/role lifecycle management, attribute orchestration, and policy ingestion workflows. * Coordinate with DevOps engineers on CI/CD, containerization, infrastructure automation, and deployment to Kubernetes or the government's currently installed application platform. * Troubleshoot complex identity, authentication, authorization, and policy-related issues across legacy and modernized components. * Produce engineering documentation, including design specifications, data flow diagrams, configuration standards, and interface definitions. * Ensure modernization activities reduce operational overhead and improve system reliability, maintainability, and observability. * Participate in integration testing, operational readiness testing, and deployment validation across multiple environments and security domains. * Mentor junior engineers and promote best practices in secure coding, microservices development, and ICAM integration. ## Related Videos - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026)