ICAM Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, develop, and sustain ICAM solutions utilizing Okta Identity Cloud.

• Provide support for Workforce Identity, SSO, MFA, and adaptive authentication to meet federal identity requirements.

• Integrate Okta with client credential systems, certificate-based authentication, PKI validation, and government identity providers.

• Configure and assist with SAML, OIDC, and OAuth federation across government applications, platforms, and on-premises enterprise systems.

• Develop and oversee identity lifecycle processes that align with federal access control policies, RBAC/ABAC models, and authoritative identity sources.

• Implement Zero Trust identity principles, including robust authentication, device trust, continuous validation, and least-privilege access.

• Create automation and identity workflows using Okta Workflows, APIs, and scripting tools.

• Troubleshoot authentication workflows, PKI chains, SSO integrations, and SCIM provisioning.

• Ensure adherence to NIST 800-63, FICAM architecture standards, DoD IdAM policies, and FedRAMP security controls.

• Collaborate with cybersecurity teams, cloud engineers, and system owners on the secure integration of identity for mission systems.

• Contribute to ICAM modernization roadmaps, ATO support documentation, and ongoing enhancements to identity posture.

⛳️ Requirements

• Must be a US Citizen.

• 5–8+ years of experience in ICAM/IAM engineering within federal or governmental settings.

• 3–5+ years of direct experience in administering, integrating, and federating with Okta Identity Cloud.

• Practical knowledge of PIV/CAC-based authentication, PKI trust chains, certificate mapping, and federation with federal IdPs.

• Strong comprehension of SAML, OIDC, OAuth, SCIM provisioning, Active Directory, and Azure AD.

• Experience with identity policies, RBAC/ABAC, account lifecycle management, and enterprise identity governance.

• Proficient in PowerShell, Python, or Bash automation.

• Familiarity with Zero Trust identity architecture, particularly in federal or DoD settings.

• Excellent skills in documentation, communication, and collaboration.

• Preferred experience supporting ICAM modernization initiatives in federal agencies or DoD environments.

• Preferred certification as an Okta Professional or Consultant.

• Familiarity with NIST SP 800-63, NIST CSF, OMB ICAM guidance, DoD Zero Trust Strategy, and FedRAMP controls is preferred.

• Preferred experience in integrating identity services with Azure Government or on-premises mission systems.

🏝️ Benefits

• Competitive salary.

• Comprehensive health insurance coverage.

• Dental insurance.

• Vision insurance.

• Paid life insurance.

• Paid time off.

• 11 paid holidays.

• Performance bonuses.

• Tuition reimbursement.

• Unlimited training opportunities.

• A collaborative, flexible, and innovative work environment.