Back to jobs

ICAM Engineer HYBRID Remote, SECRET Clearance Required, Springfield, VA

Technologist, Inc.Springfield, Virginia, United StatesPosted 2w ago
IAM Engineer
Apply on company site
Craft my tailored resume free

Free to start · No card

Job description

Mount Airey Group (MAG), a wholly owned subsidiary of Technologist Inc., is seeking an Identity, Credential and Access Management (ICAM) Engineer to join our team. This is a full-time HYBRID opportunity, requiring two days per week in the Springfield, VA office offering a competitive salary coupled with a stellar benefits package effective your first day of employment.

The ICAM Engineer is responsible for the engineering, implementation, automation, administration, and operational support of enterprise Identity, Credential, and Access Management (ICAM) services. This role designs and implements secure identity solutions supporting authentication, authorization, identity lifecycle management, and Zero Trust initiatives. The engineer develops automation using PowerShell and the Okta REST APIs to improve operational efficiency, reduce manual administration, and support enterprise identity operations across cloud and on-premises environments. The engineer will also evaluate and adopt emerging automation technologies, including Python, to enhance future automation capabilities.

Primary Responsibilities

  • Administer, configure, and maintain enterprise Okta Identity Cloud environments supporting workforce identity and access management.
  • Design, implement, and troubleshoot Single Sign-On (SSO) integrations using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
  • Configure and maintain authentication policies, adaptive Multi-Factor Authentication (MFA), phishing-resistant authentication, and application sign-on policies.
  • Develop and maintain user lifecycle automation, including provisioning, deprovisioning, profile mappings, attribute transformations, group rules, and application assignments.
  • Design, configure, and support inbound and outbound identity federation with internal and external Identity Providers (IdPs).
  • Develop and maintain custom user profile attributes, application profile mappings, and identity schemas to support business and partner requirements.
  • Integrate enterprise applications with Okta while ensuring compliance with organizational security policies and Federal ICAM standards.
  • Troubleshoot complex authentication, federation, provisioning, authorization, and identity synchronization issues across cloud and on-premises environments.
  • Develop and maintain PowerShell automation utilizing the Okta REST APIs to perform administrative functions, user lifecycle management, reporting, and large-scale user profile updates.
  • Design and execute automated batch processes for creating, modifying, and updating user identities while ensuring data integrity, consistency, and auditability.
  • Develop reusable automation scripts and tools that improve operational efficiency and reduce manual administrative effort.
  • Integrate enterprise systems using REST APIs to automate identity management workflows and improve data consistency across identity repositories.
  • Evaluate and develop future automation capabilities using Python to support API integrations, reporting, and enterprise automation initiatives.
  • Support Public Key Infrastructure (PKI), PIV/CAC authentication, certificate-based authentication, and smart card integrations.
  • Develop technical architecture documentation, implementation guides, standard operating procedures, workflow diagrams, and engineering documentation.
  • Participate in Zero Trust initiatives by implementing modern identity-centric security controls and authentication mechanisms.
  • Analyze identity-related security events and assist with audit, compliance, and forensic investigations.
  • Collaborate with cybersecurity, infrastructure, networking, and application teams to implement secure identity solutions.
  • Perform testing, change management, production deployments, and Tier III engineering support for enterprise identity services.
  • Research, evaluate, and recommend new identity technologies and automation solutions that improve security, reliability, and operational efficiency.

Technical Requirements:

  • Okta Identity Cloud
  • Microsoft Entra ID
  • Ping Identity
  • PowerShell
  • Okta REST APIs
  • REST APIs
  • JSON
  • Identity Lifecycle Management
  • SAML 2.0
  • OAuth 2.0
  • OpenID Connect (OIDC)
  • Multi-Factor Authentication
  • Identity Federation
  • Active Directory
  • LDAP
  • PKI
  • PIV/CAC Authentication
  • Zero Trust Architecture
  • Technical Documentation
  • Enterprise Identity Troubleshooting

Expected Experience:

  • Experience implementing and supporting:
    • Single Sign-On (SAML 2.0, OAuth 2.0, OpenID Connect)
    • Multi-Factor Authentication (MFA)
    • Identity Federation
    • User Lifecycle Management
    • Active Directory and LDAP
    • REST API integrations
  • Experience developing automation using PowerShell.
  • Experience consuming and integrating REST APIs.
  • Experience working with JSON and API payloads.
  • Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field, or equivalent professional experience.
  • Minimum of 2 (two) years of daily hands-on experience administering and engineering solutions using Okta Identity Cloud, including application integrations, identity lifecycle management, automation, and REST API development.

OR

  • Minimum of 3 (three) years of hands-on experience administering an enterprise Identity and Access Management platform such as Microsoft Entra ID, Ping Identity, ForgeRock, or a comparable IAM solution.
  • Current SECRET level clearance.
  • Ability to travel to Washington, DC for important meetings.
  • Health Care Plan (Medical, Dental & Vision)
  • Retirement Plan (401k, with employer match)
  • Paid Time Off (Vacation, Sick & Federal Holidays)
  • Short Term & Long Term Disability
  • Training & Development

Prepare your application

Use the description above to assess your fit for Technologist, Inc.. This checklist is guidance from Resumize, rather than additional requirements from the employer. Imported listings can be shortened or change after collection, so confirm the complete description and current availability before sending an application.

Match requirements to evidence

Identify the responsibilities and skills the employer explicitly names. For each important requirement, choose one example from your work, education, training, or projects. Explain what you did, how you did it, and what changed as a result. Include a measurable outcome when you can support it. If you lack a requirement, describe related experience accurately instead of adding an unfamiliar skill to your resume.

Put the most relevant examples near the top of your resume. Keep job titles, dates, qualifications, and contact details consistent across your application materials. Use the employer’s terminology when it describes your experience accurately; a copied list of keywords does not explain your contribution. A short, specific bullet is easier to review than a paragraph that mixes several unrelated duties.

Check the working arrangement

Confirm the location, schedule, employment type, and any eligibility requirements on the employer’s site. A remote label does not establish worldwide eligibility or flexible hours. If compensation, benefits, equipment, travel, or contract duration are missing from this listing, write down your questions for the recruiter. Do not assume details from another opening at the same company apply to this role.

Review before submitting

Follow the employer’s requested file format and application instructions. Open your exported resume and check that its text is selectable, its sections read in order, and its links work. Proofread names, dates, and contact information. Share confidential work samples only when you have permission, and use an anonymized example when necessary.

Submit through a trusted employer or recruiting destination. If the original listing has disappeared, search the employer’s careers page for the title rather than assuming the vacancy remains open. Save the application date, job reference, and the version of your resume you sent. Those details help you prepare for a later conversation and avoid submitting conflicting information through several job boards.

Review your resume for writing and readability feedback, or browse other openings if this opportunity is unavailable.