ICAM Engineer

Booz Allen Hamilton

. Integrate commercial cloud environments with agency enterprise services and identity architectures .

Posted 9/23/2026full-timeReston • Virginia • United StatesSeniorLead💰 $99,000 - $225,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in identity and access management, cloud security engineering, and the implementation of secure identity designs. Proficient in integrating cloud environments with enterprise IAM platforms and applying Zero Trust principles.

Highest-signal resume keywords

Identity And Access ManagementCloud Security EngineeringOCI Solutions DeploymentFederation, SSO, MFA ImplementationSAML 2.0, OpenID Connect, OAuth 2.0

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity Lifecycle ManagementRBACABACToken Claims ManagementAttribute MappingMetadata ExchangeZero Trust PrinciplesSecurity Control ImplementationTroubleshooting Authentication FlowsCloud Integration

Soft Skills

Stakeholder CommunicationTroubleshooting Skills

Tools & Technologies

GEOAxISActive DirectorySCIMLDAPTerraformOCI Resource ManagerPing IdentityMicrosoft Entra IDOktaADFS

Certifications & Qualifications

Active TS/SCI ClearanceArchitecture, Security, Networking, or Cloud Operations Associate- or Professional-level OCI Certifications

Industry Keywords

RMFICD 503Authorization ProcessesSecurity AssessmentsControl ValidationRemediation TrackingEnterprise MonitoringSIEM PlatformsCloud OnboardingClassified Environments

Tech Stack

Tools & technologies

CloudCyber SecurityOracleTerraformTypeScript

About the role

Key responsibilities & impact

Integrate commercial cloud environments with agency enterprise services and identity architectures
Design, deploy, secure, and operate OCI solutions involving identity, audit logging, network security, secrets and key management, and privileged access
Integrate cloud applications and services with agency enterprise IAM platforms, including NGA GEOAxIS or comparable capabilities
Implement federation, SSO, MFA, identity lifecycle provisioning and deprovisioning, RBAC, ABAC, and least-privilege access models
Configure and troubleshoot SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, LDAP, and Active Directory integrations
Manage token claims, attribute mapping, certificates, metadata exchange, and authentication-flow troubleshooting
Apply Zero Trust principles and develop secure identity designs, control implementations, test evidence, and operating procedures
Support RMF, ICD 503, and NGA A&A activities, including security-control implementation and assessment evidence
Coordinate solution architectures, resolve technical issues, and communicate identity, security, and operational risks to stakeholders
Support transition of cloud capabilities into reliable operations
Collaborate with Oracle personnel, government stakeholders, security teams, and technical delivery teams

Requirements

What you’ll need

8+ years of experience in identity and access management, cloud security engineering, or cybersecurity
Experience integrating commercial cloud environments with agency-specific enterprise services and identity architectures
Experience designing, deploying, securing, and operating OCI solutions
Experience integrating applications and cloud services with enterprise IAM platforms such as GEOAxIS
Experience implementing federation, SSO, MFA, identity lifecycle management, RBAC, ABAC, and least-privilege access
Experience with SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, LDAP, Active Directory, token claims, attribute mapping, certificates, and metadata exchange
Experience applying Zero Trust principles and supporting secure identity designs, control implementation, testing, and operating procedures
Knowledge of RMF, ICD 503, and authorization processes
Active TS/SCI clearance
Willingness to take a polygraph exam
Bachelor’s degree
TS/SCI clearance is required
Nice If You Have: experience supporting security assessments, authorization packages, control validation, or remediation tracking
Nice If You Have: experience integrating cloud and identity logs with enterprise monitoring or SIEM platforms
Nice If You Have: experience with Terraform, OCI Resource Manager, or comparable infrastructure-as-code and automated configuration tools
Nice If You Have: experience with Ping Identity, Microsoft Entra ID, Okta, or ADFS
Nice If You Have: experience supporting ICAM or cloud onboarding in classified, regulated, or other mission environments
Nice If You Have: excellent stakeholder communication and troubleshooting skills
Nice If You Have: Architecture, Security, Networking, or Cloud Operations Associate- or Professional-level OCI Certifications

Benefits

Comp & perks

Health benefits
Life insurance
Disability benefits
Financial benefits
Retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program
Identity verification process using advanced biometrics and artificial intelligence
Camera-on expectation during interviews and assessments
Full-time employees and part-time employees working at least 20 hours per week are eligible for Booz Allen benefit programs