ICAM Engineer, Senior

Booz Allen Hamilton

Confirmed live today Low trust

Quick summary

Work type
On-site
Location
Scott AFB, ILNorfolk, VA
Salary
$86,800–$198,000 / yr
Employment
Full-time
Posted
40 days ago
Freshness
Confirmed live today
Closes
Dec 16, 2026

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $170k
This role $142k
$73k $217k
below market most similar roles pay here above market

This role pays less than 75% of similar roles. Most pay $144,952–$195,037 — the blue band above. At the midpoint, this role pays about $142k versus about $170k for comparable roles.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1662 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 904 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · ICAM Engineer, Senior

The ICAM Engineer, Senior joins the team to manage identity and access management within a Zero Trust architecture. This role involves interfacing with stakeholders and engineering teams to analyze the identity lifecycle, articulate access requirements, and define enterprise identity records. You will design, deploy, and support systems that verify user privileges and manage credentials for critical assets, including single sign-on and privileged access systems. Required technical skills include experience with Ping Federate, Entra ID, Okta, or ADFS, as well as SAML 2.0, OAuth 2.0, and OpenID Connect. You must be able to integrate IdPs with Active Directory and LDAP while managing workflows across AWS, Azure, or Google Cloud. The work focuses on securing identities against cybercriminals to protect data and maintain process integrity.

What you'll do

  • Analyze the identity lifecycle to articulate access requirements and define enterprise identity records.
  • Design, deploy, and support systems that verify user privileges and manage credentials for valuable assets.
  • Implement enterprise-class solutions for single sign-on (SSO) and privileged access systems.
  • Integrate Identity Providers (IdPs) with directory services like Active Directory and LDAP.
  • Implement password-less authentication and multi-factor authentication (MFA) within Zero Trust architectures.
  • Resolve complex identity and federation issues including token validation errors and connectivity problems.
  • Operate IdP solutions across on-premises, hybrid, and cloud infrastructures including AWS, Azure, and Google Cloud.
  • Automate IdP configuration, monitoring, and remediation tasks using scripting languages like Python, PowerShell, or Bash.

What we're looking for

  • High school diploma or GED.
  • Experience with Ping Federate, Entra ID, Okta, or ADFS.
  • Experience with SAML 2.0, OAuth 2.0, or OpenID Connect (OIDC).
  • Experience with Identity Federation, Single Sign-On (SSO), and access control models like RBAC or ABAC.
  • Experience integrating IdPs with directory services such as Active Directory (AD) and LDAP.
  • Knowledge of Zero Trust architectures and implementation of password-less or multifactor authentication (MFA).
  • Ability to design and operate IdP solutions across on-premises, hybrid, and cloud infrastructures (AWS, Azure, or Google Cloud).
  • Secret clearance.

More like this

Similar roles

ICAM Engineer

Booz Allen Hamilton

Scott AFB, IL +1 49 days ago
Ping Identity Entra ID Okta ADFS SAML 2.0 OAuth 2.0 OpenID Connect RBAC ABAC Active Directory LDAP Zero Trust AWS Azure Google Cloud Python PowerShell Bash MFA SSO

ICAM Engineer

Booz Allen Hamilton

Reston, VA +1 33 days ago $86,800–$198,000
OCI IAM SAML 2.0 OpenID Connect OAuth 2.0 SCIM LDAP Active Directory Zero Trust Terraform Ping Identity Microsoft Entra ID Okta ADFS RMF ICD 503 RBAC ABAC MFA SSO
8+ yrs exp

ICAM Engineer

Booz Allen Hamilton

San Diego, CA 81 days ago
IAM Active Directory LDAP Okta Duo CyberArk Delinea Azure AWS PKI PIV Microsoft Identity Manager SailPoint Saviynt One Identity Splunk ELK Stack IGA PAM Zero Trust

ICAM Engineer

Booz Allen Hamilton

Colorado Springs, CO +2 101 days ago
IAM Active Directory LDAP MFA Privileged Access Management CyberArk Delinea Azure AWS PKI PIV EntraID Microsoft Identity Manager SailPoint Saviynt One Identity Splunk ELK Stack IGA Zero Trust

ICAM Architect

Booz Allen Hamilton

McLean, VA 110 days ago
Entra ID Identity and Access Management (IAM) Zero Trust Java JavaScript Python PowerShell Groovy RESTful APIs Active Directory LDAP Okta SAML 2.0 OAuth 2.0 OpenID Connect (OIDC) Saviynt Sailpoint Omada Oracle IAM CI/CD DevOps AWS Cognito Azure AD B2C Keycloak Google Cloud Identity MFA NIST FedRAMP CMMC

Identity Provider Operations Engineer

Booz Allen Hamilton

McLean, VA +1 55 days ago
PingFederate Okta Entra ID SAML 2.0 OAuth 2.0 OpenID Connect Python Java JavaScript PowerShell Groovy RESTful APIs Active Directory LDAP SCIM CI/CD AWS Cognito Azure AD B2C Google Cloud Identity MFA Zero Trust