Senior ICAM Engineer

Booz Allen Hamilton

. Interface with stakeholders and engineering teams to examine critical processes and user roles .

Posted 9/17/2026full-timeIllinois • United StatesSenior💰 $86,800 - $198,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing enterprise identity solutions, including Single Sign-On (SSO) and access control models. Proficient in integrating identity providers with Active Directory and cloud infrastructures while ensuring security through Zero Trust architectures and multifactor authentication.

Highest-signal resume keywords

Ping FederateSAML 2.0Identity FederationZero Trust ArchitecturesPython

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity Lifecycle AnalysisAccess Control ModelsToken ValidationIdP ConfigurationPassword-less AuthenticationMFA ImplementationAgile DevelopmentCloud Infrastructure DesignRBACABAC

Soft Skills

Stakeholder EngagementProblem Solving

Tools & Technologies

OktaADFSActive DirectoryLDAPAWSAzureGoogle CloudJiraConfluenceOkta Workflows

Certifications & Qualifications

DoD 8140 CertificationSecret Clearance

Industry Keywords

Identity ManagementSingle Sign-OnIdentity ProviderCloud-native IAM ServicesCredential Management

Tech Stack

Tools & technologies

AWSAzureCloudPython

About the role

Key responsibilities & impact

Interface with stakeholders and engineering teams to examine critical processes and user roles
Analyze identity lifecycles
Articulate access requirements and define enterprise identity records
Design, deploy, and support systems that verify user privileges and manage credentials
Implement enterprise-class identity solutions, from single sign-on to privileged access systems
Support client missions while preventing unauthorized access and disruption

Requirements

What you’ll need

Experience with Ping Federate, Entra ID, Okta, or ADFS
Experience with SAML 2.0, OAuth 2.0, or OpenID Connect (OIDC)
Experience with Identity Federation and Single Sign-On (SSO)
Experience with access control models such as RBAC or ABAC
Experience integrating IdPs with Active Directory (AD) and LDAP, including synchronization and authentication workflows
Knowledge of Zero Trust architectures and implementation of password-less authentication or multifactor authentication (MFA) within the IdP environment
Ability to resolve complex identity and federation issues, including token validation errors, assertion mismatches, and connectivity problems
Ability to design and operate IdP solutions across on-premises, hybrid, and cloud infrastructures, including AWS, Azure, or Google Cloud, and multiple Impact Levels
Secret clearance required
HS diploma or GED
Experience with agile development solutions such as Jira or Confluence
Experience with advanced platform features such as Okta Workflows, Ping Identity Suite advanced policy scripting, adaptive authentication, and custom login pages
Experience with Python, PowerShell, or Bash for IdP configuration, monitoring, and remediation automation
Knowledge of cloud-native IAM services, including Azure Active Directory, AWS IAM, or Google Cloud Identity
DoW 8140 Certification

Benefits

Comp & perks

Health benefits
Life benefits
Disability benefits
Financial benefits
Retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program for exceptional performance and superior demonstration of values
Identity verification process using advanced biometrics and artificial intelligence
Camera-on expectation during interviews and assessments
Full-time employees working at least 20 hours a week on a regular basis are eligible for Booz Allen’s benefit programs