GovCIO

4 days ago

SME Systems Engineer (ICAM)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Serve as primary technical authority for ICAM modernization supporting the U.S. Coast Guard. Lead migration of legacy access controls to secure identity-centric frameworks, managing enterprise directories, federation, authentication/authorization, and SSO. Architect identity lifecycles, provisioning, privilege controls, and Zero Trust principles aligned to NIST SP 800-207. Configure PKI, MFA, and PAM, build federated identity services, and perform root-cause analysis, audits, and compliance documentation across specialized platforms.

Location: Alexandria

Workplace: Hybrid

Employment Type: Full time

Job Function: IT Operations (Systems/Network Admin)

Seniority: Mid level

Key Responsibilities

•Lead modernization of legacy access controls into robust, secure ICAM solutions.
•Manage enterprise directories plus federation, authentication, authorization, and SSO protocols.
•Architect identity lifecycles, user provisioning workflows, and privilege management controls.
•Design and deploy Zero Trust identity principles (NIST SP 800-207) across network hubs.
•Configure and manage PKI, credentials, authenticators, and logical/physical access controls (MFA, SSO, PAM), plus perform root-cause analysis, privilege audits, and performance tuning.

Pay and Benefits

Salary: USD 135,000 - 172,000 annually

Key Requirements

•DoD 8570 IAT Level II or higher certification (e.g., Security+ CE, CySA+, or vendor-specific identity certifications).
•Deep technical knowledge of federated identity (SAML, OAuth, OIDC) and Active Directory/LDAP architecture.
•Hands-on experience managing Smart Card / Common Access Card (CAC) authentication and PKI certificate validation.
•Proven experience designing and applying federal Zero Trust identity guidelines (NIST SP 800-207) within enterprise networks.
•Active Secret clearance required.

Experience:10+ yearsICAMIdentity managementFederated identityZero TrustPKI

Education:High School

Certifications:DoD 8570 IAT Level IISecurity+ CECySA+DoD 8570

Languages:English

Tech Stack:Identity, Credential, and Access Management (ICAM)Zero TrustNIST SP 800-207SAMLOAuthOIDCActive DirectoryLDAPSSOFederationAuthenticationAuthorizationMFAPAMPrivilege managementPKIPKI certificate validationSmart CardCommon Access Card (CAC)DoD 8570

Eligibility

Security Clearance:Secret

Company Brief

GovCIO

Provides IT modernization, cloud, cybersecurity, data analytics, and managed services to U.S. federal civilian and defense agencies, delivering technology solutions and mission support to improve government operations and security.

Industry: Professional Services

Growth: Established Company

Headquarters: Herndon, United States

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

GovCIO

4 days ago

SME Systems Engineer (ICAM)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Location: Alexandria

Workplace: Hybrid

Employment Type: Full time

Job Function: IT Operations (Systems/Network Admin)

Seniority: Mid level

Key Responsibilities

•Lead modernization of legacy access controls into robust, secure ICAM solutions.
•Manage enterprise directories plus federation, authentication, authorization, and SSO protocols.
•Architect identity lifecycles, user provisioning workflows, and privilege management controls.
•Design and deploy Zero Trust identity principles (NIST SP 800-207) across network hubs.
•Configure and manage PKI, credentials, authenticators, and logical/physical access controls (MFA, SSO, PAM), plus perform root-cause analysis, privilege audits, and performance tuning.

Pay and Benefits

Salary: USD 135,000 - 172,000 annually

Key Requirements

•DoD 8570 IAT Level II or higher certification (e.g., Security+ CE, CySA+, or vendor-specific identity certifications).
•Deep technical knowledge of federated identity (SAML, OAuth, OIDC) and Active Directory/LDAP architecture.
•Hands-on experience managing Smart Card / Common Access Card (CAC) authentication and PKI certificate validation.
•Proven experience designing and applying federal Zero Trust identity guidelines (NIST SP 800-207) within enterprise networks.
•Active Secret clearance required.

Experience:10+ yearsICAMIdentity managementFederated identityZero TrustPKI

Education:High School

Certifications:DoD 8570 IAT Level IISecurity+ CECySA+DoD 8570

Languages:English

Eligibility

Security Clearance:Secret

Company Brief

GovCIO

Industry: Professional Services

Growth: Established Company

Headquarters: Herndon, United States

Website LinkedIn