Senior ICAM Engineer

Pay: $75.53 - $124.62 hourly, depending on experience

Benefits: Medical, Dental, Vision, Paid Time Off, Paid Holidays, Employee Assistance Program, and other company-sponsored benefits
Security Clearance: Active TS/SCI clearance with the ability to obtain and maintain a CI Polygraph
Focus Areas: Identity & Access Management, Identity Federation, Single Sign-On (SSO), OIDC, Active Directory, Application Integration

Do you enjoy solving complex identity and access management challenges? Are you experienced in integrating applications with enterprise identity services, troubleshooting authentication issues, and implementing secure access solutions?

PEMCCO is seeking a Senior ICAM Engineer to support enterprise Identity, Credential, and Access Management (ICAM) capabilities. This role focuses on integrating identity services with applications, directories, and access management platforms while ensuring secure, reliable authentication and authorization across enterprise environments.

The ideal candidate understands how identity data, authentication, access controls, and federation services work together and enjoys collaborating with developers, administrators, and security professionals to solve complex integration challenges.

About PEMCCO

PEMCCO delivers engineering, technology, cybersecurity, and mission support services to federal government customers. Our teams develop and sustain innovative solutions that help customers modernize systems, strengthen security, and support critical mission operations.

Job Overview

PEMCCO is seeking an experienced Senior ICAM Engineer to develop, integrate, and support enterprise identity and access management solutions.

In this role, you will help connect applications, directories, and identity services while supporting authentication, authorization, provisioning, federation, and identity lifecycle management. You will work closely with software engineers, infrastructure teams, and cybersecurity professionals to ensure secure and efficient access to enterprise resources.

This position is ideal for professionals who enjoy troubleshooting authentication challenges, integrating applications with identity platforms, and supporting enterprise-scale identity solutions.

What You'll Do

- Implement and integrate enterprise ICAM services with applications, directories, and authoritative identity sources.

- Develop and maintain APIs and service integrations supporting identity data and access control decisions.

- Configure and troubleshoot identity federation, single sign-on (SSO), and application authentication using OpenID Connect (OIDC) and related technologies.

- Integrate identity platforms with Active Directory, LDAP directories, and other enterprise systems.

- Automate account provisioning, updates, and deprovisioning processes.

- Support migrations from legacy identity platforms to modern identity solutions.

- Configure and maintain virtual directory services, identity synchronization, and identity data aggregation.

- Resolve authentication failures, token and claim mapping issues, and authorization inconsistencies.

- Support identity federation and secure information sharing across enterprise environments.

- Protect identity data through encryption, secure communications, and appropriate access controls.

- Implement automation and configuration management practices to ensure consistency across environments.

- Develop and maintain technical documentation, testing procedures, configuration baselines, and operational guides.

- Collaborate with developers, system administrators, and cybersecurity teams to improve identity services and access management processes.

What You Bring

Required Qualifications

- Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, Mathematics, Information Technology, or a related technical field.

- 10+ years of relevant professional experience.

- Active TS/SCI clearance with the ability to obtain and maintain a Counterintelligence (CI) Polygraph.

- Experience implementing, integrating, or supporting Identity and Access Management (IAM) or ICAM solutions.
Hands-on experience with identity federation and application authentication technologies, including OpenID Connect (OIDC).

- Experience integrating applications with identity providers and managing claims, attributes, and access mappings.

- Experience working with Active Directory and LDAP-based directory services.

- Understanding of account lifecycle management, identity synchronization, provisioning, and entitlement management.

- Experience developing or supporting APIs, scripts, or application integrations.

- Ability to troubleshoot authentication and authorization issues across applications and identity services.

- Understanding of role-based access control (RBAC), attribute-based access control (ABAC), least privilege, and identity-data protection concepts.

- Experience documenting configurations, testing integrations, and supporting change management processes.

- Ability to work onsite and collaborate with cross-functional technical teams.

Preferred Experience

- Master's degree in a related technical discipline.

- CompTIA Security+ certification or equivalent cybersecurity certification.

- Experience with identity platforms such as PingFederate, Keycloak, SailPoint, Radiant Logic, Okta, or Secret Server.

- Experience migrating applications and services between identity platforms.

- Experience with virtual directories, Microsoft Identity Manager, directory modernization, or identity synchronization solutions.

- Experience with SAML, OAuth 2.0, and SCIM.

- Experience using Python, Go, Ansible, or similar tools for automation and integration.

- Familiarity with AWS, AWS GovCloud, Kubernetes, or Red Hat OpenShift environments.

- Experience with PKI, certificate-based authentication, certificate lifecycle management, or secure credential handling.

- Experience supporting identity services in distributed or limited-connectivity environments.

- Experience implementing identity-centric Zero Trust security approaches.

Why Join PEMCCO?

- Work on challenging identity and access management initiatives that support secure enterprise operations.

- Gain exposure to modern identity platforms, federation technologies, and access management solutions.

- Collaborate with software engineers, infrastructure teams, and cybersecurity professionals.

- Help improve authentication, authorization, and identity lifecycle management processes across complex environments.

- Continue growing your expertise in enterprise IAM, federation, automation, and security technologies.

Work Environment

- Full-time onsite position in a collaborative technical environment.

- Work closely with software developers, system administrators, cloud engineers, and cybersecurity professionals.

- Opportunities to support identity platforms, application integrations, directory services, and automation initiatives.

- Fast-paced environment focused on innovation, secure access, and continuous improvement.

- Exposure to modern technologies across identity management, cloud platforms, software development, and cybersecurity.

Benefits

- Medical Insurance

- Dental Insurance

- Vision Insurance

- Paid Time Off

- Paid Holidays

- Additional company-sponsored benefits

Apply Today

If you are passionate about identity and access management, enjoy solving authentication and authorization challenges, and want to help build secure enterprise solutions, we encourage you to apply.

Join PEMCCO and help deliver modern identity services that enable secure, reliable access to critical systems and applications.

Equal Opportunity Employer

PEMCCO, Inc. is an equal opportunity employer. The Company does not discriminate on the basis of race, color, sex, sexual orientation, gender identity or expression, religion, national origin, age, disability, genetic information, military or veteran status, pregnancy, childbirth and related medical conditions, or any other characteristic protected by applicable federal, state, or local law.