GovCIO

2 months ago

SME Systems Engineer (ICAM)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 8 hours agoStatus: Live

Job Summary

Serve as a primary technical authority for enterprise identity management and access control modernization supporting the U.S. Coast Guard. Lead engineering and planning to move legacy access controls into ICAM solutions, analyze federation/SSO impacts, and design Zero Trust identity principles. Configure and manage identity directories, authentication protocols, and PKI, implement identity lifecycle and privilege workflows, integrate ICAM compliance tracking, perform root-cause and audits, and maintain detailed technical documentation.

Location: Alexandria

Workplace: Hybrid

Employment Type: Full time

Job Function: IT Operations (Systems/Network Admin)

Seniority: Mid level

Key Responsibilities

•Lead engineering, technical planning, and execution to modernize legacy access controls into robust ICAM solutions.
•Analyze federation, authentication, authorization, and single sign-on (SSO) implications across enterprise networks.
•Configure, optimize, and manage enterprise-grade identity directories, authentication protocols, and Public Key Infrastructure (PKI) systems.
•Architect and implement secure identity lifecycle workflows, privilege management controls, and automated user provisioning frameworks.
•Design and deploy Zero Trust identity principles; develop identity compliance integration interfaces; perform root cause analysis, privilege audits, performance tuning, and maintain ICAM technical documentation.

Pay and Benefits

Salary: USD 135,000 - 172,000 annually

Key Requirements

•DoD 8570 IAT Level II or higher (e.g., Security+ CE, CySA+, or vendor-specific identity certifications).
•Deep technical understanding of federated identity concepts including SAML, OAuth, OIDC, and Active Directory/LDAP architecture.
•Hands-on engineering experience managing Smart Card/Common Access Card (CAC) authentication and PKI certificate validation.
•Proven experience designing and applying federal Zero Trust identity guidelines (NIST SP 800-207) within enterprise networks.
•Active Secret clearance.

Experience:10+ years

Education:High School

Certifications:DoD 8570 IAT Level IISecurity+ CECySA+

Tech Stack:SAMLOAuthOIDCActive DirectoryLDAPPublic Key Infrastructure (PKI)Smart CardCommon Access Card (CAC)Zero TrustNIST SP 800-207RESTful API authorizationSailPointOktaMicrosoft Entra IDPing Identity

Eligibility

Security Clearance:Secret

Company Brief

GovCIO

Provides IT modernization, cloud, cybersecurity, data analytics, and managed services to U.S. federal civilian and defense agencies, delivering technology solutions and mission support to improve government operations and security.

Industry: Professional Services

Growth: Established Company

Headquarters: Herndon, United States

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

GovCIO

2 months ago

SME Systems Engineer (ICAM)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 8 hours agoStatus: Live

Job Summary

Location: Alexandria

Workplace: Hybrid

Employment Type: Full time

Job Function: IT Operations (Systems/Network Admin)

Seniority: Mid level

Key Responsibilities

•Lead engineering, technical planning, and execution to modernize legacy access controls into robust ICAM solutions.
•Analyze federation, authentication, authorization, and single sign-on (SSO) implications across enterprise networks.
•Configure, optimize, and manage enterprise-grade identity directories, authentication protocols, and Public Key Infrastructure (PKI) systems.
•Architect and implement secure identity lifecycle workflows, privilege management controls, and automated user provisioning frameworks.
•Design and deploy Zero Trust identity principles; develop identity compliance integration interfaces; perform root cause analysis, privilege audits, performance tuning, and maintain ICAM technical documentation.

Pay and Benefits

Salary: USD 135,000 - 172,000 annually

Key Requirements

•DoD 8570 IAT Level II or higher (e.g., Security+ CE, CySA+, or vendor-specific identity certifications).
•Deep technical understanding of federated identity concepts including SAML, OAuth, OIDC, and Active Directory/LDAP architecture.
•Hands-on engineering experience managing Smart Card/Common Access Card (CAC) authentication and PKI certificate validation.
•Proven experience designing and applying federal Zero Trust identity guidelines (NIST SP 800-207) within enterprise networks.
•Active Secret clearance.

Experience:10+ years

Education:High School

Certifications:DoD 8570 IAT Level IISecurity+ CECySA+

Eligibility

Security Clearance:Secret

Company Brief

GovCIO

Industry: Professional Services

Growth: Established Company

Headquarters: Herndon, United States

Website LinkedIn