ICAM Engineer

Booz Allen Hamilton

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
San Diego, CA
Salary
$86,900–$198,000 / yr
Employment
Full-time
Posted
58 days ago
Freshness
Confirmed live yesterday
Closes
Nov 5, 2026

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $174k
This role $142k
$72k most similar roles pay here $230k

This role pays less than 73% of similar roles. Most pay $142,400–$205,362 — the shaded band above. At the midpoint, this role pays about $142k versus about $174k for comparable roles.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1385 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 911 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · ICAM Engineer

ICAM Engineer As an ICAM Engineer, you will join the team to support large-scale identity and access management projects for government clients within a zero trust framework. You will be responsible for analyzing the identity lifecycle, articulating specific access requirements, and defining enterprise identity records. Your daily work involves designing, deploying, and supporting systems that manage credentials and verify user privileges for critical assets, including single sign-on and privileged access systems. To succeed in this role, you must possess experience with directory services like Active Directory or LDAP, as well as MFA solutions such as Okta, Duo, or AuthO, and PAM tools like CyberArk or Delinea. You will work within cloud environments like Azure or AWS while applying knowledge of PKI, PIV standards, and identity-focused cybersecurity principles to solve complex security challenges.

What you'll do

  • Analyze the identity lifecycle and articulate specific access requirements for government clients.
  • Define enterprise identity records to ensure secure and accurate user management.
  • Design, deploy, and support systems that verify user privileges and manage credentials.
  • Implement enterprise-class solutions for single sign-on (SSO) and privileged access management (PAM).
  • Administer directory services such as Active Directory or LDAP in cloud environments like Azure or AWS.
  • Manage multi-factor authentication (MFA) solutions including Okta, Duo, or Auth0.
  • Incorporate industry best practices and security findings into technical documentation.
  • Support large-scale identity governance and zero trust initiatives for government projects.

What we're looking for

  • 3+ years of experience supporting ICAM, security operations, or identity governance programs.
  • 3+ years of experience with administration of directory services such as Active Directory or LDAP.
  • 3+ years of experience with cybersecurity administration, including identity lifecycle management.
  • Experience with MFA solutions (Okta, Duo, AuthO) and Privileged Access Management systems (CyberArk, Delinea).
  • Experience supporting IAM solutions in cloud environments like Azure or AWS.
  • Knowledge of PKI/PIV standards, identity security best practices, and cybersecurity principles.
  • High school diploma or GED.
  • Secret clearance required.

More like this

Similar roles

ICAM Engineer

Booz Allen Hamilton

Colorado Springs, CO +2 78 days ago $86,800–$198,000
IAM Active Directory LDAP MFA Privileged Access Management CyberArk Delinea Azure AWS PKI PIV EntraID Microsoft Identity Manager SailPoint Saviynt One Identity Splunk ELK Stack IGA

ICAM Security Engineer

Booz Allen Hamilton

McLean, VA 69 days ago
ICAM IAM Zero Trust AWS Azure Okta Microsoft Identity Manager SailPoint Saviynt One Identity Splunk Entra Log Analytics ELK Stack IGA PAM PowerShell JSON Java

ICAM Architect

Booz Allen Hamilton

McLean, VA 87 days ago $86,800–$198,000
Okta Entra ID SAML 2.0 OAuth 2.0 OpenID Connect Java JavaScript Python PowerShell Groovy RESTful APIs Active Directory LDAP Zero Trust MFA Saviynt Sailpoint Omada Oracle IAM CI/CD AWS Cognito Azure AD B2C Keycloak Google Cloud Identity

ICAM Engineer

Booz Allen Hamilton

Scott AFB, IL 26 days ago $61,900–$141,000
Ping Federate Entra ID ADFS SAML 2.0 OAuth 2.0 OpenID Connect SSO RBAC ABAC Active Directory LDAP Zero Trust MFA SCIM Okta Workflows Python PowerShell Bash AWS Azure

ICAM Engineer

Booz Allen Hamilton

Reston, VA +1 10 days ago $99,000–$225,000
OCI Zero Trust SAML 2.0 OpenID Connect OAuth 2.0 SCIM LDAP Active Directory SSO MFA RBAC ABAC Terraform Ping Identity Microsoft Entra ID Okta ADFS RMF ICD 503
8+ yrs exp

Senior ICAM Engineer

Booz Allen Hamilton

Scott AFB, IL 26 days ago $86,800–$198,000
Ping Federate Entra ID ADFS SAML 2.0 OAuth 2.0 OpenID Connect RBAC ABAC Active Directory LDAP Zero Trust MFA AWS Azure Google Cloud SCIM Okta Workflows Python PowerShell Bash