ICAM Engineer Identity, Credential & Access Management

Security Clearance: Active TS/SCI Required

JOB DESCRIPTION

Anivas Technology LLC is seeking an experienced Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, implement, and maintain secure enterprise identity solutions supporting Department of Defense (DoD) and Intelligence Community (IC) operations.

The ideal candidate will have extensive experience with identity federation, authentication, directory services, access management, and application integration within secure government environments.

This position requires close collaboration with software developers, infrastructure engineers, and cybersecurity teams to ensure secure access to mission-critical systems and information.

This is a full-time, on-site position at a government facility in Charleston, SC or the National Capital Region (NCR).

KEY RESPONSIBILITIES

- Design, implement, and maintain enterprise ICAM solutions supporting government applications and mission systems.
- Integrate identity management platforms with Active Directory, LDAP directories, and authoritative identity sources.
- Develop, maintain, and integrate APIs to support identity services, authentication, and access control.
- Configure and troubleshoot Single Sign-On (SSO), OpenID Connect (OIDC), and identity federation solutions.
- Automate user account provisioning, group management, access updates, and deprovisioning.
- Support migration and modernization of legacy identity management platforms.
- Implement identity synchronization, virtual directory services, and identity data integration.
- Troubleshoot authentication failures, authorization issues, token configurations, and identity attribute mapping.
- Support secure identity federation across government networks, security domains, and mission partners.
- Apply encryption, secure communications, and appropriate access controls to protect sensitive identity information.
- Support identity services in environments with limited or intermittent connectivity.
- Develop automation scripts and configuration management processes to improve system deployment and reliability.
- Maintain system documentation, configuration procedures, integration records, and technical support documentation.
- Collaborate with engineering, development, and cybersecurity teams to strengthen enterprise identity security.

REQUIRED QUALIFICATIONS

- Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance with the ability to obtain a Counterintelligence (CI) Polygraph.
- Minimum 10 years of directly relevant professional experience.
- Previous experience supporting the U.S. Intelligence Community.
- Bachelor's degree in Cybersecurity, Computer Engineering, Electrical Engineering, Electronics Engineering, Mathematics with a concentration in Computer Science, or equivalent qualification.
- Professional experience implementing, integrating, or operating enterprise Identity and Access Management (IAM/ICAM) solutions.
- Hands-on experience with identity federation, Single Sign-On (SSO), OpenID Connect (OIDC), and application authentication.
- Experience integrating applications with identity providers, including claims, identity attributes, and access mappings.
- Strong knowledge of Microsoft Active Directory and LDAP-based directory services.
- Experience with account lifecycle management, group provisioning, identity synchronization, and entitlement management.
- Experience developing or modifying APIs, automation scripts, and identity service integrations.
- Ability to troubleshoot authentication and authorization issues across applications, identity providers, directories, and network connections.
- Understanding of Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), least privilege, and identity data protection.
- Experience documenting configurations, testing integrations, and managing changes in secure enterprise environments.
- Ability to meet applicable government cybersecurity workforce qualification requirements.
- Ability to work full-time, on-site at the assigned government facility.

PREFERRED QUALIFICATIONS

- Master's degree in Cybersecurity, Computer Engineering, Electrical Engineering, Electronics Engineering, Computer Science, or a related technical field.
- CompTIA Security+ certification.
- Experience with enterprise identity platforms such as PingFederate, Radiant Logic, SailPoint, Keycloak, Okta, or Secret Server.
- Experience migrating applications between identity platforms, particularly Keycloak and PingFederate.
- Knowledge of Microsoft Identity Manager, virtual directory solutions, and directory modernization.
- Experience with SAML, OAuth 2.0, and System for Cross-domain Identity Management (SCIM).
- Programming or automation experience with Python, Go, Ansible, or comparable technologies.
- Familiarity with AWS, AWS GovCloud, Kubernetes, and Red Hat OpenShift.
- Understanding of DoD Impact Level 5 (IL5) security and deployment requirements.
- Experience with Public Key Infrastructure (PKI), digital certificates, and certificate-based authentication.
- Experience supporting identity federation across different security domains.
- Knowledge of Denied, Disrupted, Intermittent, and Limited (DDIL) connectivity environments.
- Familiarity with Zero Trust Architecture and identity-based security policies.

ABOUT ANIVAS TECHNOLOGY

Anivas Technology LLC is a veteran-owned technology company focused on delivering innovative IT solutions, cybersecurity capabilities, data management, and technology services.

Our mission is centered on "Technology as a Strategic Enabler," helping organizations strengthen their technology infrastructure, improve operational efficiency, and support mission-critical objectives.

HOW TO APPLY

Qualified candidates are encouraged to submit their updated resumes for consideration.

IMPORTANT: An active TS/SCI security clearance and the ability to work on-site are required for this position. Candidates must also be able to obtain a CI Polygraph.