> Markdown version of [/jobs/ext/3874161-sr-identity-and-access-management-icam-engineer](https://www.wearedevelopers.com/jobs/ext/3874161-sr-identity-and-access-management-icam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr Identity and Access Management (ICAM) Engineer

- **Company:** Leidos, Inc.
- **Location:** Rockville, MD, United States
- **Experience:** Expert
- **Salary:** $107,900.0 - $195,050.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Systems Engineering, Biometrics, Identity and Access Management, OAuth, Windows PowerShell, Openid Connect, Azure Active Directory, Zero Trust Network Access, Runbook, Security Assertion Markup Language (SAML), Ws-federation, Information Technology, Graphql
- **Published:** October 22, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9259663/sr-identity-and-access-management-icam-engineer

## About the Role

Leidos Digital Sector is seeking a Sr. Identity and Access Management (IAM) Engineer to lead complex identity management solutions for large-scale government digital transformation initiatives. The ideal candidate will have deep expertise in Microsoft identity technologies and a proven track record of implementing advanced enterprise-level identity solutions.

Candidate MUST:

Be a US Citizen or US Person who has lived in the United States for at least three consecutive years and have the ability to obtain a Public Trust level 4 clearance, * Bachelor's degree in computer science, Information Technology, or equivalent and 8 years of experience or Master's with 6 plus years of general IT experience, preferably supporting system engineering. Additional years of experience may be substituted in lieu of degree.

 * 5+ years of experience focusing on identity and access management, with demonstrated ownership of complex, enterprise-scale solutions.
 * Experience in PIM and Azure AD Conditional Access policies.
 * Hands-on experience with Microsoft identity solutions (Entra ID, AD FS, Microsoft 365, MIM).
 * Proven experience in large-scale, multi-forest Active Directory and Entra ID architectures.
 * Advanced knowledge of identity protocols (SAML, OAuth 2.0, OpenID Connect, WS-Federation, CBA).
 * Strong experience with Azure AD B2B and B2C for external identity management.
 * Proficiency in PowerShell and Graph API for identity management automation.
 * Experience with Azure AD Connect, including custom synchronization rules.
 * Working knowledge of with Zero Trust architecture and identity-related security best practices.
 * Ability to communicate technical designs and risks to both technical and non-technical stakeholders.

Preferred Qualifications:

 * Relevant Microsoft certifications (e.g., Microsoft 365 Certified: Enterprise Administrator Expert, SC-300,

or SC-100).

 * Experience in government or highly regulated industries.
 * Knowledge of identity-related compliance standards and frameworks (e.g., NIST 800-53, NIST 800-63, and FISMA).
 * Experience with Azure AD Verifiable Credentials and decentralized identity concepts.
 * Understanding of biometric authentication methods and their Azure AD integration.

## Description

* Implement and maintain Microsoft Entra ID solutions, including multi-tenant and cross-tenant synchronization for complex organizations.
 * Lead the execution of identity platform migrations (i.e. migration from on-premises Active Directory to Microsoft Entra ID Native authentication) including planning, risk assessment, cutover, and rollback strategies.
 * Lead and implement advanced identity management solutions using Entra ID to optimize cost-efficiency and user experience.
 * Design, build, and maintain custom identity management tools and automation for identity lifecycle processes (joiner/mover/leaver, provisioning, and access certification).
 * Ensure identity solutions align with security, compliance, and business requirements, and partner with security, infrastructure, and compliance teams on design decisions and risk trade-offs.
 * Support technical escalations for complex identity incidents and perform root cause analysis.
 * Develop documentation, standards, and runbooks, and mentor junior engineers.
 * Evaluate emerging Microsoft identity technologies and industry best practices and recommend adoption where they add value.