Senior ICAM Engineer

TEKsystems is seeking experienced Senior Identity, Credential, and Access Management (ICAM) Engineers to support a large Intelligence Community customer building and modernizing enterprise identity services as part of a next-generation Zero Trust architecture initiative. This is an opportunity to join a newly awarded program and support the design, integration, and operation of mission-critical identity and access management solutions within a secure government environment. Positions are available in both Herndon, VA and Hanahan, SC. All work is performed onsite at a secure government facility., Implement and integrate enterprise ICAM services with mission applications and identity sources Configure and troubleshoot identity federation and single sign-on (SSO) solutions Support authentication and authorization services utilizing OpenID Connect (OIDC), OAuth, and related technologies Integrate identity platforms with Active Directory and LDAP-based directory services Develop and maintain APIs and service integrations supporting access control decisions Automate account provisioning, lifecycle management, and entitlement management processes Support migration efforts from legacy identity platforms to modern identity solutions Partner with software developers, infrastructure teams, and security personnel to resolve authentication and access-related issues Maintain configuration baselines, technical documentation, and integration procedures

Active Top Secret/Sensitive Compartmented Information (TS/SCI) clearance Ability and willingness to obtain a Counterintelligence (CI) Polygraph Bachelor’s degree in Cybersecurity, Computer Engineering, Electrical Engineering, Computer Science, Mathematics, or a related field 10+ years of relevant experience supporting enterprise identity and access management environments Experience implementing and integrating enterprise IAM/ICAM solutions Experience with identity federation and authentication technologies Strong experience with: OpenID Connect (OIDC) Active Directory LDAP Identity and Access Management (IAM) Identity Federation API integrations Experience troubleshooting authentication and authorization issues across enterprise environments Prior experience supporting Department of Defense (DoD) or Intelligence Community customers

Preferred Qualifications CompTIA Security+ Experience with: PingFederate Keycloak SailPoint Okta Radiant Logic Microsoft Identity Manager Knowledge of: SAML OAuth 2.0 SCIM PKI Zero Trust Architecture Experience with automation tools such as Python or Ansible Familiarity with AWS GovCloud, Kubernetes, and OpenShift

Work Environment This position supports an Intelligence Community customer in a highly secure classified environment. Candidates should be comfortable working full-time onsite within a SCIF and collaborating closely with government and contractor personnel.

Clearance Requirements An active TS/SCI clearance is required for consideration. Candidates must be eligible for and willing to obtain a CI Polygraph. Due to the classified nature of the work, this position is not eligible for remote or hybrid work arrangements.