ICAM Engineer

Booz Allen Hamilton

Confirmed live today Low trust

Quick summary

Work type
On-site
Location
Scott AFB, ILNorfolk, VA
Employment
Full-time
Posted
49 days ago
Freshness
Confirmed live today

Market check

Salary context

How this pay compares to similar roles

Similar $182k
$132k $232k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $147,500–$216,375.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1662 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 904 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · ICAM Engineer

As an ICAM Engineer, you will join the team to play a critical role in Identity and Access Management and Zero Trust architectures. You will interface with stakeholders and engineering teams to analyze the identity lifecycle, articulate access requirements, and define enterprise identity records. Your daily responsibilities include designing, deploying, and supporting systems that verify user privileges and manage credentials for valuable assets, including single sign-on and privileged access systems. You will utilize technologies such as Ping Federate, Entra ID, Okta, and ADFS, while working with SAML 2.0, OAuth 2.0, and OpenID Connect. You must integrate IdPs with Active Directory and LDAP, manage RBAC or ABAC models, and operate solutions across AWS, Azure, or Google Cloud infrastructures to solve complex federation and authentication issues.

What you'll do

  • Analyze the identity lifecycle to articulate access requirements and define enterprise identity records.
  • Design, deploy, and support systems that verify user privileges and manage credentials for critical assets.
  • Implement enterprise-class solutions for single sign-on (SSO) and privileged access systems.
  • Integrate Identity Providers (IdPs) with directory services like Active Directory and LDAP.
  • Implement password-less authentication and multi-factor authentication (MFA) within Zero Trust architectures.
  • Resolve complex identity and federation issues including token validation errors and connectivity problems.
  • Operate IdP solutions across on-premises, hybrid, and cloud infrastructures including AWS, Azure, and Google Cloud.

What we're looking for

  • High school diploma or GED.
  • Experience with Ping Federate, Entra ID, Okta, or ADFS.
  • Experience with SAML 2.0, OAuth 2.0, or OpenID Connect (OIDC).
  • Experience with Identity Federation, Single Sign-On (SSO), and access control models like RBAC or ABAC.
  • Experience integrating IdPs with directory services such as Active Directory and LDAP.
  • Knowledge of Zero Trust architectures and password-less or multifactor authentication (MFA).
  • Ability to design and operate IdP solutions across on-premises, hybrid, and cloud infrastructures (preferred).
  • Secret clearance.

More like this

Similar roles

ICAM Engineer, Senior

Booz Allen Hamilton

Scott AFB, IL +1 40 days ago $86,800–$198,000
Ping Federate Entra ID Okta ADFS SAML 2.0 OAuth 2.0 OpenID Connect RBAC ABAC Active Directory LDAP Zero Trust AWS Azure Google Cloud Python PowerShell Bash Jira Confluence

ICAM Engineer

Booz Allen Hamilton

Reston, VA +1 33 days ago $86,800–$198,000
OCI IAM SAML 2.0 OpenID Connect OAuth 2.0 SCIM LDAP Active Directory Zero Trust Terraform Ping Identity Microsoft Entra ID Okta ADFS RMF ICD 503 RBAC ABAC MFA SSO
8+ yrs exp

ICAM Architect

Booz Allen Hamilton

McLean, VA 110 days ago
Entra ID Identity and Access Management (IAM) Zero Trust Java JavaScript Python PowerShell Groovy RESTful APIs Active Directory LDAP Okta SAML 2.0 OAuth 2.0 OpenID Connect (OIDC) Saviynt Sailpoint Omada Oracle IAM CI/CD DevOps AWS Cognito Azure AD B2C Keycloak Google Cloud Identity MFA NIST FedRAMP CMMC

ICAM Engineer

Booz Allen Hamilton

San Diego, CA 81 days ago
IAM Active Directory LDAP Okta Duo CyberArk Delinea Azure AWS PKI PIV Microsoft Identity Manager SailPoint Saviynt One Identity Splunk ELK Stack IGA PAM Zero Trust

ICAM Engineer

Booz Allen Hamilton

Colorado Springs, CO +2 101 days ago
IAM Active Directory LDAP MFA Privileged Access Management CyberArk Delinea Azure AWS PKI PIV EntraID Microsoft Identity Manager SailPoint Saviynt One Identity Splunk ELK Stack IGA Zero Trust

Identity Provider Operations Engineer

Booz Allen Hamilton

McLean, VA +1 55 days ago
PingFederate Okta Entra ID SAML 2.0 OAuth 2.0 OpenID Connect Python Java JavaScript PowerShell Groovy RESTful APIs Active Directory LDAP SCIM CI/CD AWS Cognito Azure AD B2C Google Cloud Identity MFA Zero Trust