Senior ICAM Engineer

DAn Solutions is seeking a Senior Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services supporting secure mission applications and information sharing., * Implement and integrate enterprise ICAM services with mission applications and directories.

• Develop APIs and integrations supporting identity data and access control decisions.
• Configure and troubleshoot single sign-on, federation, and OIDC authentication.
• Integrate identity platforms with Active Directory, LDAP, and authoritative identity sources.
• Automate user account provisioning, updates, and deprovisioning.
• Support migration from legacy identity platforms to modern identity services.
• Maintain virtual directory services and identity synchronization.
• Troubleshoot authentication failures, token claims, and authorization inconsistencies.
• Support identity federation across networks and mission partners.
• Apply encryption, access controls, and secure communications to identity data.
• Support identity services in constrained connectivity environments.
• Maintain system documentation, configuration baselines, and test procedures.

The ideal candidate will have extensive experience with identity federation, directory services, authentication, authorization, and application integration within DoD or Intelligence Community environments., * Active TS/SCI clearance with the ability to obtain a CI Polygraph.

• Bachelor’s degree in Cybersecurity, Computer Engineering, Electrical Engineering, Mathematics, or a related technical discipline, or equivalent qualifications.
• At least 10 years of directly relevant experience.
• Previous Intelligence Community experience.
• Hands-on enterprise identity and access management experience.
• Experience with OIDC, identity federation, and application authentication.
• Experience integrating applications with identity providers and directory services.
• Strong Active Directory and LDAP experience.
• Knowledge of account lifecycle management, synchronization, and entitlement management.
• Experience developing APIs, scripts, or application integrations.
• Understanding of role-based and attribute-based access control.
• Ability to meet applicable cybersecurity workforce qualification requirements., * Master’s degree in a related discipline.
• CompTIA Security+ certification.
• Experience with PingFederate, Radiant Logic, SailPoint, Keycloak, Okta, or Secret Server.
• Experience migrating identity providers and modernizing directory services.
• Familiarity with SAML, OAuth 2.0, and SCIM.
• Go, Python, Ansible, or comparable automation experience.
• AWS GovCloud, Kubernetes, or OpenShift experience.
• PKI, certificate management, and Zero Trust architecture knowledge.
• Experience supporting identity services in DDIL environments.

Work Location

Full-time, on-site support at a government facility in Charleston, SC or the Washington, DC Metropolitan Area.

Salary Range Disclaimer:The posted salary range represents the good-faith minimum and maximum compensation DAn Solutions expects to pay for this position. The position may be filled at different Labor Category (LCAT) levels depending on the selected candidate’s qualifications and applicable contract requirements. Final compensation within the posted range will be determined based on the applicable LCAT and factors including education, relevant experience, certifications, and other required qualifications