> Markdown version of [/jobs/ext/3266485-icam-engineer](https://www.wearedevelopers.com/jobs/ext/3266485-icam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # ICAM Engineer - **Company:** Akima - **Location:** Alexandria, VA, United States - **Experience:** Expert - **Salary:** $170,000.0 - $175,000.0 - **Contract:** Permanent contract - **Skills:** Active Directory, User Authentication, Microsoft Azure, Cloud Computing, Cloud Engineering, Cyber Security, Multi-Factor Authentication, Identity and Access Management, Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), Microsoft SQL Server, NT LAN Manager, Oracle (Applications), Role-Based Access Control, Azure Active Directory, Zero Trust Network Access, Technical Debt, Information Technology, Hardware Infrastructure - **Published:** September 25, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9195878/icam-engineer ## About the Role * Active Top Secret security clearance with SCI eligibility. * Bachelor's degree from an accredited university. * Minimum 8 -10 years in an IT related field. * Active IAT Level II certification or equivalent., * Major in Information Technology. * Certification: Oracle OCP, Microsoft SQL Expert. * Experience with Microsoft Identity Manager (MIM) and Microsoft Entra Connect for identity synchronization. * Experience with Azure and Microsoft Entra-based identity models. ## Description * Serve as the senior technical subject matter expert for Identity, Credential, and Access Management (ICAM) across hybrid Microsoft environments, including legacy on-premises infrastructure and Microsoft Azure cloud services. * Design and guide the evolution of the enterprise ICAM architecture from datacenter-centric identity services toward a modern Azure and Microsoft Entra-based identity model while still maintaining secure and reliable support for legacy applications and infrastructure. * Assess existing identity services, authentication methods, directories, federation services, privileged access, certificates, service accounts, and application dependencies to identify modernization requirements, technical risks, and migration constraints. * Collaborate with Cloud, Application, Infrastructure, Cybersecurity, and Solution Architects to develop target-state and transition-state ICAM architectures, modernization roadmaps, technical standards, and implementation patterns. * Design and support hybrid identity solutions integrating Microsoft Active Directory Domain Services, Microsoft Entra ID, cloud and on-premises applications, and authoritative identity sources while maintaining appropriate identity synchronization, authentication, authorization, and lifecycle controls. * Develop migration and coexistence strategies for applications and infrastructure transitioning to Azure, including modernizing authentication and authorization methods while supporting legacy technologies such as LDAP, Kerberos, NTLM, federation, certificates, and other required authentication mechanisms during the transition. * Design and guide implementation of modern access controls and identity security capabilities, including multifactor authentication, Conditional Access, role-based access control, privileged identity and access management, federation, certificate-based authentication, and Zero Trust principles. * Provide technical guidance to application, infrastructure, and cloud engineering teams during solution design and implementation, ensuring new and modernized services appropriately integrate with enterprise ICAM capabilities and standards. * Identify identity-related technical debt, dependencies, security risks, and modernization opportunities and develop practical remediation and migration recommendations that balance cloud transformation objectives with continued operation of mission-critical legacy services. * Develop and maintain ICAM architecture documentation, integration, identity flows, standards, technical designs, migration plans, and implementation guidance necessary to support architecture governance, cybersecurity review, engineering, and ongoing operations. ## Related Videos - [Resolving technical debts in software architecture](https://www.wearedevelopers.com/videos/1680-resolving-technical-debts-in-software-architecture) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Get security done: streamlining application security with Aikido](https://www.wearedevelopers.com/videos/1638-get-security-done-streamlining-application-security-with-aikido) - [Your Code as a Crime Scene](https://www.wearedevelopers.com/videos/1342-your-code-as-a-crime-scene) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Unleashing Potential Across Teams: The Power of Infrastructure as Code](https://www.wearedevelopers.com/videos/930-unleashing-potential-across-teams-the-power-of-infrastructure-as-code) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 210: AI Agents Are Go! Is MCP Dead? LLMs Crack Anonymity](https://www.wearedevelopers.com/magazine/709-dev-digest-210-ai-agents-are-go-is-mcp-dead-llms-crack-anonymity) - [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters)