> Markdown version of [/jobs/ext/3634882-4548-icam-engineer](https://www.wearedevelopers.com/jobs/ext/3634882-4548-icam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # 4548 ICAM Engineer - **Company:** Procession Systems - **Location:** Lorton, VA, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Active Directory, Systems Engineering, User Authentication, Bash Shell, Configuration Management, Cyber Security, System Configuration, Linux, Monitoring of Systems, Identity and Access Management, Python (Programming Language), Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, Windows PowerShell, Role-Based Access Control, Openid Connect, Security Assertion Markup Language (SAML), Enterprise Software Applications, Okta, Cyberark, Infrastructure Automation Frameworks, Information Technology, 3-tier Architectures, Api Design, Restful APIs, Devsecops - **Published:** October 8, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9224520/4548-icam-engineer ## About the Role We are seeking an experienced ICAM Engineer to support Identity, Credential, and Access Management (ICAM) capabilities within a government classified environment. You will provide primarily Tier 3 engineering and administration support for a Commercial Off-the-Shelf (COTS) ICAM/Privileged Access Management (PAM) solution. The ideal candidate will have hands-on experience administering and troubleshooting enterprise ICAM/PAM technologies, strong scripting and automation skills, and the ability to operate effectively in a highly secure, mission-critical environment. Experience with at least one of the following ICAM/PAM COTS platforms is required: Keycloak, RadiantLogic, or Idira (formerly CyberArk)., * 4+ years of professional experience in identity and access management, cybersecurity, systems administration, or a related technical field. * Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline. * Hands-on experience administering at least one enterprise ICAM/PAM COTS solution: + Keycloak + RadiantLogic + Idira (formerly CyberArk) * Strong experience with scripting and automation, using technologies such as PowerShell, Python, Bash, or similar. * Experience troubleshooting complex enterprise authentication, authorization, and access-management issues. * Experience working in a secure or classified government environment. * Strong understanding of identity and access management concepts, including authentication, authorization, RBAC, SSO, MFA, identity lifecycle management, and privileged access. * Strong analytical, troubleshooting, and problem-solving skills. * Ability to work independently while collaborating effectively with cross-functional technical teams., * Experience supporting ICAM/PAM solutions within a DoD, DHS, or other federal government environment. * Experience integrating ICAM platforms with enterprise directories such as Active Directory or LDAP. * Experience with SAML, OAuth 2.0, and OpenID Connect (OIDC). * Experience with REST APIs and API-based integrations. * Experience with infrastructure automation, configuration management, or DevSecOps practices. * Experience with Linux and Windows system administration. * Experience supporting high-availability and enterprise-scale identity platforms. * Familiarity with NIST, FISMA, FedRAMP, STIG, or other federal cybersecurity requirements. * Experience developing automation for system monitoring, health checks, provisioning/deprovisioning, and operational support. ## Description * Provide Tier 3 administration, engineering, troubleshooting, and operational support for enterprise ICAM/PAM COTS solutions. * Administer, configure, maintain, and troubleshoot ICAM/PAM platforms in a classified government environment. * Support identity lifecycle management, authentication, authorization, privileged access, and access control capabilities. * Diagnose and resolve complex technical issues escalated from Tier 1 and Tier 2 support teams. * Perform system configuration, upgrades, patching, integration, and ongoing maintenance of ICAM/PAM solutions. * Develop and maintain scripts and automation to improve system administration, operational efficiency, and reliability. * Integrate ICAM capabilities with enterprise applications, infrastructure, directories, and security services. * Analyze system logs, troubleshoot authentication and authorization issues, and identify root causes of complex problems. * Support system hardening and security configuration in accordance with government security requirements and applicable security policies. * Develop and maintain technical documentation, standard operating procedures, configuration documentation, and troubleshooting guides. * Collaborate with cybersecurity, systems engineering, network, application, and operations teams to resolve complex identity and access issues. * Participate in testing, deployment, change management, and implementation activities for ICAM capabilities. * Support incident response and remediation related to identity, authentication, authorization, and privileged access. * Ensure ICAM systems remain operational, secure, and compliant with applicable government requirements.