ICAM Engineer

Location: Washington, DC

Department: USDA Cyber Services

Description

Title: ICAM Engineer

Location: Hybrid, Washington, DC

Terms: Full-time

Clearance: Qualified candidates must be US citizens with the ability to obtain a Public Trust

Travel: 0-20%

Position Description:

Harmonia is seeking an ICAM (Identity, Credential, and Access Management) Engineer aligned to the National Initiative for Cybersecurity Education (NICE) Framework (Securely Provision) to support Federal government cybersecurity initiatives.

This role is responsible for designing, implementing, testing, and maintaining identity and access management capabilities throughout the system development life cycle. The ICAM Engineer will support the development and integration of identity architectures that align business, system, and security requirements with mission needs, while ensuring compliance with federal cybersecurity standards.

The ICAM Engineer works closely with application, infrastructure, and engineering teams to integrate identity services into system designs, support the implementation of secure access controls, and enhance identity-related security tools and capabilities across enterprise environments.

Responsibilities:

• Design, implement, test, and evaluate ICAM capabilities and identity security controls throughout the system development life cycle.
• Develop and maintain identity architectures supporting authentication, authorization, and access control aligned with mission and security requirements.
• Collaborate with application, infrastructure, and engineering teams to integrate ICAM solutions into system and cloud architectures.
• Support the selection, implementation, maintenance, and enhancement of identity and access management tools and technologies.
• Guide and support the secure implementation of identity services within cloud-based environments (AWS, Azure).
• Implement and manage identity solutions including SSO, federation (SAML, OAuth, OIDC), and multi-factor authentication (MFA).
• Support Privileged Access Management (PAM) and identity governance capabilities.
• Ensure ICAM solutions align with federal cybersecurity policies, standards, and best practices (e.g., NIST, OMB, Zero Trust).
• Provide technical guidance and recommendations related to identity architecture, access control design, and security implementation.
• Support system security assessments, authorization (A&A) activities, and compliance efforts as they relate to identity systems.
• Document ICAM architectures, configurations, and processes to support operational and compliance requirements.

Requirements:

• Advanced capability level consistent with the NICE framework roles, with demonstrated abilities, knowledge, and skills to perform all core ICAM tasks.
• Demonstrated, recent experience supporting cybersecurity or ICAM initiatives within a U.S. Federal Government agency (required).
• Bachelor’s degree from an accredited college or university (or equivalent experience).
• 5+ years of experience implementing and supporting ICAM, IAM, or identity security solutions.
• Experience designing and implementing identity platforms such as Okta, SailPoint, Ping Identity, ForgeRock, or Microsoft Entra ID (Azure AD).
• Experience with authentication and federation protocols including SAML, OAuth, OIDC, and MFA.
• Demonstrated experience in cloud security and guiding the secure implementation of identity services in AWS and/or Azure environments.
• Strong understanding of Zero Trust principles and identity-centric security architectures.
• Experience working directly with federal stakeholders and mission owners.
• Strong analytical, communication, and documentation skills.

 Desired:

• Experience supporting USDA programs, systems, or initiatives.
• Experience with federal identity standards such as HSPD-12, PIV/CAC integration, and ICAM reference architectures.
• Experience supporting enterprise-wide identity architecture initiatives in a federal environment.
• Familiarity with identity governance and administration (IGA) and Privileged Access Management (PAM) solutions.
• Experience supporting cloud-native and emerging technologies.
• Relevant certifications (e.g., CISSP, CISM, cloud certifications, or IAM/ICAM-specific certifications).

#DICE #CJ