ICAM Engineer

Booz Allen Hamilton

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Reston, VASpringfield, VA
Salary
$99,000–$225,000 / yr
Employment
Full-time
Posted
3 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $175k
This role $162k
$84k most similar roles pay here $240k

This role pays less than 53% of similar roles. Most pay $142,437–$208,200 — the shaded band above. At the midpoint, this role pays about $162k versus about $175k for comparable roles.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 784 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 759 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · ICAM Engineer

ICAM Engineer As an ICAM Engineer, you will join the team to integrate commercial cloud environments with agency enterprise services and identity architectures within secure, regulated, and mission-focused environments. You will design, deploy, secure, and operate OCI solutions while managing identity federation, access management, Zero Trust principles, and cloud onboarding. Your daily responsibilities include implementing SSO, MFA, RBAC, ABAC, and least-privilege models while configuring SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, LDAP, and Active Directory integrations. You will manage token claims, attribute mapping, certificates, and metadata exchange to resolve technical issues and communicate operational risks. The role requires expertise in RMF and ICD 503 standards to support authorization activities. Technical skills include experience with OCI Resource Manager, Terraform, Ping Identity, Microsoft Entra ID, Okta, or ADFS within complex identity lifecycle management workflows.

What you'll do

  • Design, deploy, and operate OCI solutions involving identity management, audit logging, and network security.
  • Integrate cloud applications and services with agency enterprise IAM platforms like NGA GEOAxIS.
  • Implement federation, SSO, MFA, and identity lifecycle provisioning using RBAC and ABAC models.
  • Configure and troubleshoot SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, LDAP, and Active Directory integrations.
  • Manage token claims, attribute mapping, certificates, and metadata exchange for authentication flows.
  • Apply Zero Trust principles to develop secure identity designs and operating procedures.
  • Support RMF and ICD 503 activities by implementing security controls and providing assessment evidence.
  • Communicate technical risks and resolve complex infrastructure issues with stakeholders and delivery teams.

What we're looking for

  • 8+ years of experience in identity and access management, cloud security engineering, or cybersecurity.
  • Experience integrating commercial cloud environments with agency-specific enterprise services and identity architectures.
  • Experience designing, deploying, securing, and operating OCI solutions.
  • Experience implementing federation, SSO, MFA, identity lifecycle management, RBAC, ABAC, and least-privilege access.
  • Experience with SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, LDAP, Active Directory, token claims, attribute mapping, certificates, and metadata exchange.
  • Knowledge of RMF, ICD 503, and authorization processes.
  • Active TS/SCI clearance and willingness to take a polygraph exam.
  • Bachelor’s degree.

More like this

Similar roles

ICAM Engineer

Booz Allen Hamilton

Scott AFB, IL 19 days ago $61,900–$141,000
Ping Federate Entra ID ADFS SAML 2.0 OAuth 2.0 OpenID Connect SSO RBAC ABAC Active Directory LDAP Zero Trust MFA SCIM Okta Workflows Python PowerShell Bash AWS Azure

Senior ICAM Engineer

Booz Allen Hamilton

Scott AFB, IL 19 days ago $86,800–$198,000
Ping Federate Entra ID ADFS SAML 2.0 OAuth 2.0 OpenID Connect RBAC ABAC Active Directory LDAP Zero Trust MFA AWS Azure Google Cloud SCIM Okta Workflows Python PowerShell Bash

ICAM Security Engineer

Leidos

Remote (Gaithersburg, MD) +2 7 days ago $87,100–$157,450
OAuth 2.0 OpenID Connect Keycloak Okta Ping Microsoft Entra ID RBAC ABAC mTLS PKI Kubernetes Python Java Go SAML 2.0 SCIM Istio Linkerd Kong Apigee Zero Trust SAFe Agile
4+ yrs exp Remote

ICAM Architect

Booz Allen Hamilton

McLean, VA 80 days ago $86,800–$198,000
Okta Entra ID SAML 2.0 OAuth 2.0 OpenID Connect Java JavaScript Python PowerShell Groovy RESTful APIs Active Directory LDAP Zero Trust MFA Saviynt Sailpoint Omada Oracle IAM CI/CD AWS Cognito Azure AD B2C Keycloak Google Cloud Identity

CIAM Engineer

State Street

Jersey City, NJ +1 15 days ago $100,000–$167,500
ForgeRock IAM SAML OAuth OpenID Connect Active Directory LDAP SCIM REST API AWS Azure CyberArk Okta Ping RBAC Identity Governance Automation

IA Engineer

Booz Allen Hamilton

Chantilly, VA 39 days ago $99,000–$225,000
RMF JSIG Splunk AWS Azure STIG Threat Modeling Risk Management EMASS SNOW Xacta SIPRNet JWICS ICD-503 Cybersecurity Engineering Network Security
8+ yrs exp